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FEDERAL  BUREAU  OF  INVESTIGATION 


HSICD 


Date  of  transcription  09/21/2015 


aj//rOUO^  On  September  14,  20^ 


social  security  number 

Investigation  (FBI)  Special  Agent  (SA)j_ 


Platte  River  Networks,  date  of  birth 


was  interviewed  by  Federal  Bureau  of 


and  SA: 


for  the  interview  was  Denartment  of  Justice  (DOJ)  Attorney 
attorney  at  the 


and 


Also  present 


nature  of  the  interview] 


After  being  advised  of  the  identity  of  the  interviewing  agents  and  the 
provided  the  following; 


(U//FOOe)  As 


general  role  with  the  client  and  not  involved  with  technical  details, 
general  direction  of  the  business. 


described  his  role  at  PRN  as  a 


main  concern  is  the 


(U//FOUO)  Platte  River  Networks  (PRN)  worked  with  an  individual  named 


identify  business  opportunities.  In  early  20 1 3 


to 


brought  them  a client  opportunity  who  she  claimed 
once  worked  as  a public  official.  After  submitting  a bid  to  do  the  work,  PRN  became  aware  the  contract 
they  were  bidding  on  was  for  the  management  of  an  email  server  hosting  domains  associated  vrith  BILL 
CLINTON,  HILLARY  CLINTON  and  their  aides.  PRN  won  the  bid  for  the  contract  and  the  account  was 
under  the  name  CESC. 


b6 

bVC 


b6 

b7C 


b6 

bVC 


fU//FOE?Q)  PRN  wanted  to  limit  the  employees  working  on  the  CESC  server,  so  it  was 


determined  [ who  worked  remotely  on  the  server,  andj 


who 


was  aware 


handled  the  server  on-site,  would  be  the  technical  team  doing  most  of  the  work, 
that  PRN  picked  up  an  old  server  from  the  CLINTON  residence  and  delivered  it  to  Equinix,  a datacenter 
in  Secaucus,  New  Jersey.  PRN  ordered  and  installed  new  server  hardware  at  Equinix  and  migrated  all 
CESC  email  from  their  old  server  to  the  new  PRN  provided  server.!  Iwas  aware  that  PRN 

maintained  a back-up  of  the  server  known  as  a DATTO.  The  DATTO  was  located  at  Equinix  and  worked 
by  taking  snapshots  of  the  server  and  mdntaining  that  data  for  un  to  60  days  before  it  was  deleted. 


ieferred  to  for  specifitjs 

Enterprise  Server  managed  by  PRN,  but  deferred  to 


Iwas  also  aware  of  a BlackBerry 


on  the  specifics. 


(U//FOUO)  In  or  around  March  2015 


was  involved  in  conversations  with  CESC 


where  they  requested  to  know  what  email  they  had,  where  it  w^,  and  how  it  was  backed  up. 

and^^ handled  this  request  and  would  know  more  details.  CESC  never  asked 
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Interview  o 
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On  07/23/2015.  Page 


for  administrator  rights  to  the  PRN  server  or  for  physical  access  to  the  server  at  Equinix, 
believed  CESC  was  still  a PRN  client  and  were  operating  under  the  same  contract  they  originally  signed. 


(U//FOUe) 


CESC  email  server  run  by  PRN. 


didn’t  believe  there  was  a successful  intrusion  attempt  against  the 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  05/26/2016 


a]//¥Om-)  On  May  23,  2016 


security  numberl 

(SAj 


date  of  birthl | social 

was  interviewed  by  Federal  Bureau  of  Investigation  (FBI)  Special  Agent 
and  SA at  the  offices  of  Platte  River  Networks  (PRN)  located  at 


b6 

bVC 


5700  Washington  Street.  Denver.  Colorado  80216.  Also  present  for  the  interview  was 


V - . - ■-  -1  - - 1 - - 1 - 

and  via  speaker  phone | both  attorneys  at  the 


the  identity  of  the  interviewing  agents  and  the  nature  of  the  interview, 
following  information: 


I After  being  advised  of 


jprovided  the 


(U/^WO) 


Jwas  not  aware  of  a laptop  containing  an  archive  of  email  belonging  to 

was  not  aware 


HILLARY  CLINTON  that  was  shipped  to  PRN  around  February  2014. 
what  became  of  the  foregoing  laptop. 


(u//rouox 


transmitted  to  the  ClintO| 
hy_ 


I 


[only  recently  was  made  aware  of  a CLINTON  email  archive  file  being 

Executive  Services  Corporation  (CESC)  around  July  2014  and  September  2014 
hvas  not  aware  of  the  request  by  CESC,  or  transmittal  by 


hS 

hlC 


he 

bVC 


as  It  was  occurring. 


CESC  or  exactly  howl 


Jwas  not  aware  of  what  specifically  was  requested  by 


fulfilled  the  request. 


fU//FOU01  Ivas  not  aware  of  anv  sunnort  PRN  nrovided  the  CESC  client  from 

October  2014  to  January  2015. 
shred  their  email  records.  As  a 
technical  details  of  any  PRN  c' 

was  not  aware  of  anv  CESC  request  to  delete,  wipe  or 

would  not  pay  attention  to 

lent. 

hS 

hlC 


(U//rOUOj  At  this 
the  March  2015  timeframe 


i 


pint  in  the  interview.  Agents  displayed  PRN  provided  records  and  email  from 
provided  the  following  information: 


(U//FOUO)  In  March  2015,  when  various  media  outlets  reported  a private  email  domain  and 
server  was  used  by  HILLARY  CLINTON,  PRN  decided  to  create  an  internal  “share  drive”  and  control 
access  to  only  the  PRN  employees  working  the  CESC  account. stated  PRN  did  have  back- 

ups of  their  own  servers.  PRN  never  deleted  infonnation  pertaining  to  the  CESC  client  and  provided  the 
FBI  all  records  they  maintained  pertaining  to  CESC. 
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content,  to  include  where  it  existed.  PRN  employee 


data  center  in  Secuacus,  New  Jersey  where  the  CESC  server  equip] 
not  a party  to  the  discnssiori  involving  CESC/s  request  for  inventn 
instructions] did  not  recall  what 


jspeci 


(U//FOUO)  After  Agents  displayed  an  email  dated  March 


discussed  preservation  of  materials,! 
preserve  CESC  related  data. 


bould  not  recall 


1 their  email 
inix 

was 

specific 
r equipment. 

MILLS 
entity  to 


(U//FOUO)| 

31, 2015  with  CESC 
or  shredded.  Recently^ 


S 


hjB  no  recollection  of  a conference  call  on  March  25,  2015  or  March 
stated  CESC  never  requested  their  email  content  by  deleted,  wiped 


% 


as  made  aware  that 


used  Bleachbit  software  to 


shred  .pst  emml  files  contaimng  CESC  email  content  that  was  transferred  to  CESC.  As 
understood  itj  [created  a “vehicle”  to  transfer  email  files  from  the  live  mailboxes  of  CESC 

email  accounts.  then  later  used  Bleachbit  software  to  shred  the  “vehicle”  but  the  email 

content  still  existed  in  the  live  email  accounts. 


(U//rOUO)l 


Iwas  unaware  of  any  PRN  employee  conducting  manual  deletions  of 


the  DATTO  device  used  to  back-up  the  CESC  email  server. 

(u//Eeuo)| 


was  unaware  of  any  successful  computer  intrusion  of  the  CESC  server. 

Iwill  be  maintained 


(U//FQUO)  Notes  of  the  interview  and  documents  displayed  tq 
in  a FD340  envelope  and  filed  with  the  captioned  investigation. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  04/19/2016 


(U//Fe«a)  On  April  19,  2016 
social  security  account  nurnber  fSSANH 
tFBD  Special  Agents  fSAn 
llocated  atf 


]attorneys|] 


and 


date  of  birth  (DOfl)| | and 

was  interviewed  by  Federal  Bureau  of  Investigation 
at  the  law  offices  of|_ 


interviewing  Agents,  and  the  nature  of  the  interview. 


Washington  DC  20005.  Also  present  for  the  interview  were 
landl  I.  After  being  advised  of  the  identity  of  the 

provided  the  following  information: 


is  currently  thej] 


|met  President  WILUAM  CLINTON 

Jat  the  White  House  in  the  fall  ofj  I After  his[][ 


and  HIT, 1. ARY  CLINTON  when  he  became  an 
served  in  various  positions  in 


the  CLINTON  White  House  and  continued  to  work  for  President  CLINTON  after  his  presidency. 

(U//FOUO)  In  the  years  after  President  CLINTON  left  the  White  House,  CLINTON’S  staff 
managed  certain  details  related  to  the  information*  technology  needs  of  CLINTON’S  office.  One  of  those 
needs  required  negotiating  with  an  individual  who  owTied  several  .com  domains  related  to  CLINTON’S 
name. I [recalled  these  domains  to  be  presidentclinton.com,  clintonfoundation.com,  and  owjc.com. 

Ultimately,  negotiations  were  successful  and  the  domains  were  purchased  from  the  individual. 

(U//FOUO)  In  2006  or  2007,  JUSTIN  COOPER  obtained  a private  email  server  (Apple  Server) 
for  the  office  of  President  CLINTON.  COOPER  antj  ~|  had  several  conversations  about  reliability 
issues  related  to  the  previous  outsourced  server  and  decided  it  would  be  best  to  have  a server  under  their 
physical  control  at  the  CLINTON’S  residence  in  New  York.  COOPER  handled  the  procurement  and  all 
aspects  of  server  management,  to  include  the  creation  of  new  accounts  or  any  requests  to  move  email. 


Loi  server 
believed 


withHIJMA  AKTT? 
Server. 


[initidiy  had  emajEaci^^^^  lecaJled  a conversation 

BEuTN  and  COOPER  regarding  the  addition  of  HILLARY  CLINTON  to  the  Apple 
] thought  it  was  a bad  idea,  but  the  issue  had  been  decided  by  that  point  in  time, 
dition  of  HILLARY  CLINTON  to  the  Apple  Server  occurred  while  she  was  in  the  S 


believed  the  addition  of  HILLARY  CLINTON  to  the  Apple 
CLINTON  used  BlackBerry  devices  obtained  by  COOPER  to  access  her  email. 


Senate, 
was  not  involved 


in  the  decision  to  move  to  a new  server  (Exchange  Server),  but  recalled  it  was  located,  as  was  the  Apple’ 
Server,  in  the  basement  of  the  CLINTON’S  New  York  residence. 
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^U//FOUO^  COOPER  notifieq 

system,  but^ could  not  recall  any  specific  details.  They  shared  a mutual  concem[ 


few  times  each  year  about  attempted  intrusions  of  the 


bad  too  much  private  information  about  the  CLINTONS  and  may  have  had  access  to  some  of  their 
communications. 


(U//FOUO)  |had  no  knowledge  regarding  the  following  topics: 


discussio  ‘o^^ovet 


ge  Server 

to  move  to  the  Exchange  Server 
Exchange  Server 


personnel  involved  ir 
domains  on  th4A^  p., 
users  oh  ' Excha 

dispositic  )fme  Exchange  Server  after  decommissioning 

classified  information  on  Appto^rver  or  Exchange  Server 

conversations  concerning  fed^^Kcords  as  it  related  to  the  Apple  Server  or  Exchange  Server 
backups  of  the  Apple  Server  or  Exchange  Server  . 

, Sensitive  Compartmented  Information  Facilities  at  the  CLINTON’S  New  York  or  Washington, 
DC  residences did  recall  Secure  Telephone  Units  in  New  York  and  Washington,  DC) 


Secure  fax  machines  or  secure  computers  at  the  New  York  or  Washington,  DC  residences 
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Date  of  transcription  06i/09/2Q16 


(U//FeUO)  On  June  6.  2016. 


social  security  number 
j^ent  (SA)[ 


date  of  birth 


was  interviewed  by  Federal  Bureau  of  Investigation  (FBI)  Special 
land  SA at  the  FBI  Washington  Field  Office,  601 


Street  NW.  Washington,  DC  20535,  Also  present  for  the  interview  was  FBI  Intelligence  Analyst 

[ After  being  advised  of  the  identities  of  the  interviewing  agents  and  the  purpose  of  the 

interview,  ]provided  the  following  information: 


(u//roue-) 


works  for[ 


specializing  in  the  areas  of  missile,  space,  and  intelligence.  In  addition, 


a company  focused  on  domestic  data  acouisition  whicW 


Jias  several  products  to  include 


from  the  over  60  billion  records  iij 


possession. 


a defense  contractor 


owns 


lestablished  in 


as  well  ^ other  products  drawn 

Dark  Horse  Data, 


Inc.  (DHD),  a company  owned  by  former  Deputy  Under  Secretary  of  Defense  for  Intelligence 
REGINALD  HYDE.  DHD  works  with  foreign  data,  can  contract  directly  with  the  government,  and 
frequently  embeds  its  personnel  with  clients. 


(U//rOUO)  In  June  or  July  201 5 J 


States  Senate  Committee  on  the  Judiciary,  contacted^ 

CLINTON’S  email  server  might  end  up  overseas.  Specifically 

was  an  intrusion  into  CLINTON’S  server  and,  if  so,  whether  exfiltrated  data  fell  into  the  hands  of  a 


a senior  staff  member  of  the  United 
[out  of  concerns  data  from  HILLARY 


[wanted  to  determine  if  there 


foreign  power. 
Marines.  Addi 
Therefore,^ 


imial 


compromised. 


5 


was  concerned  any  exfiltrated  data  could  endanger  her  three  sons,  who  are 


y,  she  was  unset  as  a citizen  and  Senate  Staff  Member  that  this  situation  could  occur. 


asked 


if  it  was  possible  to  determine  if  CLINTON’S  server  had  been 


jstated  he  would  have  to  look  for  data  that  was  genuine,  authentic,  and  relevant. 


defined  those  three  terms  as  follows: 


Genuine  - data  originating  from  CLINTON’S  server 
Authentic  - data  that  had  not  been  altered 

Relevant  - data  from  CLINTON’S  server  that  was  moved  outside  of  the  United  States  to  a place 
where  a foreign  actor  could  access  it 


(U//rOUO)  Since! 


September  2015  she  met  with  NEW 


did  not  have  funding  for  the  project  described  above,  in  August  or 


GINGRICH  and  asked 


ho  brief  GINGRICH  on  the  project. 
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GINGRICH,  and 


were  all  bothered  by  the  potential  that  data  from  CLINTON’S 
server  had  been  compromised  GINGRICH  wanted  to  sneak  with  others  about  the  project  and  in 


December  2015,  recommended 
the  project  as  four  phases  to 


speak  with 


% 


Judicial  Watch. 


The  phases  were  to  determine  if: 


briefed 


Phase  1 -CLINTON’S  server  was  directly  or  indirectly  attacked 

Phase  2 -SIDNEY  BLUMENTHAL’s  server  was  directly  or  indirectly  attacked 

Phase  3 — data  was  exliltrated  outside  the  United  States 

Phase  4 - data  was  exposed  to  a foreign  actor 


Ad 


briefed  the  project,  he  raised  the  question  of  what  the  course  of  action  would  be  if  classified 
information  was  uncovered.  The  three  discussed  it  and  decided  Judicial  Watch’s  legal  counsel  should  be 
consulted. 


never  received  an  answer,  but  was  of  the  opinion  that  if  he  uncovered  data  he 


thought  might  be  classified,  he  would  be  obligated  to  report  it  to  the  appropriate  authorities. 

(U//rOUO)  In  January  or  February  2016,  Judicial  Watch’s  legal  counsel  advised  the  project  was 
feasible,  but  could  not  involve  accessing  any  systems  without  authorization.  The  project  could  review 
open  source  data  following  the  four  phases  described  above.  After  these  initial  discussions  with  Judicial 
Watchl  Iconcluded  the  motivation  of  Judicial  Watch’s  actions  was  not  centered  on  the  elections. 


(UATQUO) 


advised  there  are  three  potential  funding  streams  for  the  types  of  projects 


his  company  undertakes.  They  can  be  funded  by  his  company,  a government  contract,  or  a data 
arbitrageur.  In  this  situation,  the  arbitrageur  would  invest  in  litigation  on  the  prospect  of  a judge  awarding 
the  arbitrageur  attorney’s  fees. 


(U//FOUO)  In  February  or  March  2016, 


company, 


Watch  to  proceed  with  Phase  1.  Judicial  Watch  awarded  the  contract  tol 


was  given  $32,000  by  Judicial 
because  they  were 

bad  to 


confident  he  understood  both  the  Deep  Web  and  Dark  Web.  After  receiving  the  contract, 
determine  the  best  place  to  obtain  the  necessary  data  for  the  project.  Based  on  the  terms  outlined  by 
Judicial  Watch’s  counsel.  CLINTON  and  BLUMENTHAL’s  respective  servers  were  off  limits,  as  were 


offshore  servers. 


turned 


t 


a former  executive  at 


a cyber  intelligence 


company  which  ingests  data  from  the  Deep  Web  and  Dark  Web  and,  then,  indexes  the  data.  By 


leveraging data,  J could  search  the  Deep  Web  and  Dark  Web  without  exposing  his 


searches  to  the  Internet 


paid 


$2,500  to  have 


conduct  searches  based  on  search 


terms  provided  by | These  search  terms  included,  but  were  not  limited  to,  HILLARY 

CLINTON  SIDNEY  BLUMENTAL-  and  an  Internet  Protocol  (IP)  address  range  obtained  from  an  email 
provided  td 


|by  Judicial  Watch,  Inretum,|  ^ 
which  was  the  exclusive  data  source  used  bM 


brovided  the  results  of  those  searches  to 


JOT  this  project 


(u//rouo 


eviewed  the  data  provided  by 


BLUMENTHAL’s  server  on  a server  in  Romania, 


md  found  files  from 

believed  BLUMENTHAL  had  a personal 
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server  beeause  he  found  some  of  BLUMENTHAL’s  files  on  the  server  in  Romania,  but  not  any  of 
BLUMENTHAL’s  emails.  The  Romanian  server  contained  approximately  200  Microsoft  Word,  Excel, 
and  other  file  types  belonging  to  BLUMENTHAL, 


(U//FOUO)  In  reference  to  a May  22, 2009  alleged  intrusion  of  CLINTON’S  server  appearing  in  a 


draft  version  of  a report  onl 
hack  or  the  specific  date. 


project 


stated  he  could  not  recall  where  he  learned  of  the 


ipeculated  it  was  possibly  from  a public  report,  but  he  had  looked  for 


the  source  and  could  not  find  it.  Therefore, 
iterations  of  the  report. 


planned  to  remove  the  reference  from  future 


(U//F0t5O)  During! 


is  review  of  the  data  obtained  by 


1 jie  found  one  sensitive 

Excel  file  listing  the  names  of  known  or  suspected  jihadists  in  Libya,  | jadded  that  a portion  of  the 

file  was  in  Russian.  The  file  did  not  come  from  BLUMENTHAL’s  server,  but  contained  a reference  to  an 
IP  address  range  that  included  the  IP  address  of  CLINTON’S  server.  Upon  viewing  this  file, 


became  cnnpemed  he  had  found  a classified  document  and  stopped  the  project.  This  work  completed 
Phase  1 and jplanned  to  deliver  the  final  report  to  Judicial  Watch  soon. 


(U//FOUO)[ , 

2012,  which  was  the  same  timeframe  wheti[ 


stated  some  of  the  BLUMENTHAL  files  were  dated  on  or  a|iout  January 

{contacted 


I regarding  the 

Libyan  Rogue  Nation  Judgment  Recovery  Program  (LRNJRP),  | jelaimed  he  was  hired 

bv  the  T-ihyan  opposition  government  to  recover  the  assets  of  the  MUAMMAR  GADDAFI  government. 


Jalso  met  with  TYLER  DRUMHELLER  regarding  the  same  matter. 


speculated 


BLUMENTHAL,  if  involved  in  the  LRNJRP,  could  have  written  the  memos  as  a “shake  and  bake”  tactic. 


(U//FOUO)  A copy  of  the  original  interview  notes  and  documents  provided  to  the  FBI  by 
during  the  interview  are  enclosed  in  a 1 A envelope. 


b6 

bVC 


b6 

b7C 


b6 

b7C 


b6 

b7C 
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ALL  INFORlfATi™  COITTAIl'IEE 

HSKZIN  IS  Ul^CLASSIFIEB 

DATE  10-05-2016  BY  J37JS5T34  NSi; 


FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  09/2 1/20  i 5 


On  September  14,  2015J 

Networks  (PRN),  date  of  birth social  securh 

Federal  Bureau  of  Investigation  (FBI)  Special  Agent  TSA  m 
I Also  present  for  the  interview  waj 

Department  of  Justice  (DOJ)  Attorney I Aftt 

interviewing  agents  and  the  nature  of  the  interview, 


I Platte  River 
viewed  by 


_Jfrom| land 

isLadvised  of  the  identity  of  the 


Provided  the  following: 


On  or  about  January  2013J_^ | oi| I contacted  I [egarding 

potential  business  with  a high  profile  former  goveiWient  client. had  an  existing 

relationship  with  jbecause  she  previously  referred  other  clients  from  a family  wealth  asset 

management  firm.  The  potential  client’s  current  email  server  architecture  lost  connectivity  during  pvpn 
such  as  Hurricane  Sandy,  so  they  wanted  better  support  than  their  existing  arrangemepf.  I 
with  the  assistance  of  other  PRN  personnel,  put  together  a proposal  and  submitted  it  tcl  Once 

PRN  was  chosen  as  one  of  the  three  finalists  for  the  contract,  PRN  was  notified  the  potential  client  was 


WILLIAM  CLINTON  and : 
After  PRN  won  the  contraci 
and| 

working  on  the  project  sm3 
directly  on  the  CESC  oroiec 
signed  in  August  2013  asl 
managerV  and~ 
and  handled  an 

work  at  Equinix,  while 
work  on  the  project. 


ILLARy  CLINTON,  doing  business  through  a company  named  CESC. 

ItQOk  on  a smaller  role  antj  worked  primarily  with 

J CESC  wanted  to  keep  the  number  of  individuals 

so  PRN  identified  three  people  as  the  only  personnel  allowed  to  work  - 


Those  individiids  were  identified  i 

- hsoliition  design)^  [ 

](helpdesk).| did  am 

ximaf  ely  10%  of  the  work.  | 

handled  everything  elsLI 


:TviceT.evel  Agreement  (SLA) 

(project 

nately  90%  of  the  work  for  CESC 
bole  was  to  help  with  on-site 
was  ultimately  not  needed  to 


When  baas_asked  to  review  an  email  he  sent  discussing  a new  email  address  for 

HILLARY  CLINTON’ stateq  could  not  answer  the  question  for  attorney-client 

privilege  reasons.  A copy  of  the  email  is  attached  to  this  communication  in  an  FD-340. 

PRN  chose  Equinix  as  the  datacenter  for  CESC’s  new  email  server  (hereafter,  PRN  server) 
specificdlv  because  it  did  not  go  down  during  Hurricane  Sandy.  This  project  was  PRN’s  first  time  using 
Equinix.  transported  CESC’s  existing  equipment  (hereafter,  predecessor  server)  and 

transported  it  to  Lquimx,  so  the  content  of  the  predecessor  server  could  be  migrated  to  the  new  PRN 
server. 


b6 

This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  It  is  the  property  of  the  FBI  and  is  loaned  to  your  agency:  it  b7C 

and  its  contents  are  not  to  be  distributed  outside  your  agency. 


FD-302a(Rev.  10-6-95) 


Continuation  of  FD-3Q2  of ^ 

— interview  ol  . On  09/14/50 r 5 9 

technical  aues 

tions  res 

Stated  PRN 
arding'  snann 

used  an  outside  finn,  MX  Logic,  for  spam  filtering,  but  referred  other 
filtering,  data  migration,  archives/backups,  and  Microsoft  Exchange  to 

and/or 

had  no  knowledge  of: 


he 

hlC 


hS 

hlC 


hS 

hlC 


• Email  servers  used  by  CESC  prior  to  the  one  transported  by  PRN  to  Equinix. 

• The  existence  of  classified  information  on  either  server. 

• Discussions  regarding  federal  records  retention. 

• Intrusions  to  the  PRN  server. 


FD-302a(Rev.  10-6-95) 


ALL  IW'FORllATIOl'l  CDUTAHIEL 

HEREIN  IS  UNCLASSIFIED 

DATE  10-05""201^  EY  J37JS5T54  HSIGG 


-1- 

FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  05/26/2016 


numbei 


I 


U//rOUO^  On  May  23,  2016 


date  of  birtU 


was  interviewed  bv  Federal  Bureau  of  Investigation  f 


social  security 


and 


BI)  Special  Agent  (S  A) 


at  the  offices  of  Platte  River  Networics  tPRNi  located  at  5700 
Washington  Slyeet.  Denver.  Coltyado  80216.  Also  present  for  the  interview  wad  and 


both  attorneys  at  thd 


speaker  phone 

identity  of  the  interviewing  agents  and  the  nature  of  the  interviewj 
information: 


via 


After  being  advised  of  the 

irovided  the  following 


(u/zrouQ^ 


|for  PRN,  and  in  that  role, 

had  contact  with  PRN  client  CT.TNTON  F.X^.CT  JTIVF.  SKR  VICKS  TORPOR  ATTON  fCRS^  His  points 
of  contact  at  CESC  were  CHERYL  MILLS, 


and 


(U//FOUOj|  I was  not  aware  of  a laptop  containing  an  archive  of  ^mail  belonging  to 

HILLARY  CLINTON  that  was  shipped  to  PRN  around  February  20 1 4j  was  not  aware 

what  became  of  the  foregoing  laptop. 


(U//FQUQ 
Clinton  Executive 


I vas  not  aware  of  a CLINTON  email  archive  being  transmitted  to  the 

Services  Corporation  (CESC)  around  July  2014  and  September  2014  by 


shred  their  email  records. 


(U//FOU01 

was  not  aware  of  anv  support  PRN  provided  the  CESC  client  from 

October  2014  to  January  2015. 

|was  not  aware  of  any  CESC  request  to  delete,  wipe  or 

b6 

bVC 


be 

b7C 


be 

b7C 


be 

b7C 


be 

b7C 


(U//FQUQ)  At  this  noinl  in  the  intei 
the  March  2015  timeframe 


ipiew,  Agents  displayed  PRN  provided  records  and  email  from 
provided  the  following  information: 


(U//FOUO)  In  March  2015,  when  various  media  outlets  reported  a private  email  domain  and 


server  used  by  HILLARY  CLINTON, 
to  conduct  penetration  testing  of  the  CESC  email  serve 


from  a company  namedl 


I 


jsptertamed  the  idp  of  hiring  a tMrd  nartv  comnany 
recommended 


but  the  testing  ultimately  did  not  occur. 


he 

bVC 

b6 

b7C 


Investigation  on  Q5/23/2Q16 


at 


Denver,  Colorado 


b3 

b7E 


b6 

b7C 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  It  is  the  property  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  arc  not  to  be  distributed  outside  your  agency. 
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b6 

b7C 


Contmuation  ofFD-302  of 


Interview  ol 


.On  Q7/23/2Q15,Page 


(U/tf©ee)  In  March  2015, 


recalled  PRN  employed 


kravelled 


to  the  Equinix  data  center,  but  did  not  know  the  purpose  of  the  trip. 

(U//FOUO)  After  Agents  displayed  an  email  dated  March  09,  2015  where  CHERYL  MILLS 

discussed  preservation  of  material g | could  not  recall  any  other  request  by  any  entity  to 

preserve  CESC  related  data recalled  receiving  some  guidance  by  PRN  attorneys  to 

preserve  data,  but  could  not  recall  specifically. 


(U/ZTOUel 


March  31.  2015  with  CESC 
PRN’s  attorney.! 
shredded. 


1m 


no  recollection  of  a specific  conference  call  on  March  25,  2015  or 


pd  recall  conference  calls  with  CESC  that  were  run  by 


(U/yTOUO)^ 


stated  CESC  never  requested  their  email  content  by  deleted,  wiped  or 
was  unaware  of  any  successful  computer  intrusion  of  the  CESC 


server. 


(U//FOUO^  Notes  of  the  interview  and  documents  displayed  toj^ 
in  a FD340  envelope  and  filed  with  the  captioned  investigation. 


will  be  maintained 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Dale  of  transcription  03/03/20  [ 6 


(U//F©Ue)  On  February  4.  2016 
JnY,  mobile  phone 


home  addresa 


was  interviewed  at  the  law  offices  of  Bryan  Cave  LLP.  1 155  F 
Street  NW  Washington.  DC  20004  bv  Federal  Bureau  of  Investigation  fFBI)  Special  Agent  (SAl 


counsel^ 


^d  Sa[ 


Department  of  Justice  attorney^ 


the  interviewing  agents  and  the  nature  of  the  interview. 


]were  also  present  for  the  interview.  After  being  advised  of  the  identity  of 

provided  the  following; 


(u//rouo) 


(CLINTON)  in  1 997  when  he  was  assignedi 


first  met  President  WILLIAM  CLINTON  and  HILLARY  CLINTON 

o The  White  House  asl 


At  that  time, 

received  a security  clearance  after  a single  scope  background  investigation  was  conducted.  He 


served  in  The  White  Housd 
CLINTON  left  office.  Onf 


told 


accepted  the  offer  and  on 


their  New  York  faiiaily. 

NY  residence.  For  the  first  six  months J 

nrnvided  tn  every  nre.sident  who  leave.s  office  f 


ko  include  traveling  with  the  President,  until  2001  when  President 

President  CLINTON’ sf 


fthe  CLINTONs  had  been  keeping  an  eve  on  hirn  and  would  like  him  to  join 

drove  to  their  Chappaqua, 


:E 


1 I v * * ‘ ' 

I position  was  covered  as  part  of  the  military  assistance 


he  primarily  focused  on 


He  then  returned  to  Chappaqua  where 


but  ended  up  with  many  more  responsibilities- 


recalled  an  Apple  server  in  the  basement  of  the  CLINTON’S  Chappaqua 
hut  c^es  not  remember  when  it  was  installed  or  by  whom.  It  was  a big  box  to  the  right  of 

[with  no  external  devices  attached,  however,  it  had  an  internal  capability  to  backup  data. 

HUMA  ABEDIN,!  | HILLARY  CLINTON,  TIISTTN  COOPF.R,  AND 


server  as  a workstation. 


pad  email  accounts  under  the  qwjc  domain  housed  on  the  server 


also  used  the 


(UZ/FOtfO) 


did  not  know  of  plans  to  install  the  server  constructed  by  BRYAN 
PACtT  TANO  at  the  time  jt  occurred.  The  server  consisted  of  three  thin  black  boxes  mounted  in  a rack, 
described  himself  as  not  technical  and,  therefore^  could  not  speak  to  any  details  regarding  this 


server. 


hS 

hic 


hS 

hlC 


he 

hlC 


he 

bVC 


Investigation  on  02/Q4/2Q16  ai , 

[302 


Washington,  DC 


File# 


By^ 


Date  dictated  ^ 


N/A 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  ft  is  the  property  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency. 
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Continuation  of  FD-302  of  Interview  of  . On  02/04/2016  . Page  2 

(U//FOUO) did  not  recall  escorting  anyone  from  Platte  River  Networks  in  June  2013 

into  the  Chappaqua  residence  to  remove  the  server  described  above. 

(U//FOUO)  HILLARY  CLINTON’S  office  was  on  the  third  floor  of  the  Chappaqua  residence. 
After  she  became  the  Secretary  of  State,  the  State  Department.(State)  converted  it  into  a sensitive 
enmnarfmented  information  facility  (SCIF).  During  the  installation  of  the  secure  lines  for  the  SCIF, 

;tood  at  the  door  as  an  escort  for  the  technicians.  After  that  conversion,  CLINTON  was  the 
only  one  who  had  the  combination  to  access  the  office  until  it  was  decommissioned  one  to  two  weeks 
^er  her  departure  from  State.  It  contained  approximately  three  phones  installed  by  State.] 
believed  all  three  tn  he  secure  phones  and  described  them  as  a black  STU  phone,  a yellow  phone,  and  a 
white  phone.]  did  not  know  the  differences  in  the  phones.  The  office  al^o  contained 

CLINTON’S  non-secure  desktop  computer,  a shredder,  and  a secure  fax  machine. initially 

stated  he  only  entered  the  SCIF  once  or  twice,  when  CLINTON  was  present,  to  remove  trash. 

(U//FOUO) later  recalled  a procedure  established  by  ABED  IN  with at  the 

beginning  of  CLINTON’S  tenure  State  for  situations  when  CLINTON  needed  assistance  with  the  secure 
fax.  When  was  notifi«d  by  St^te  personnel  of  an  incoming  secure  fax,  he  would  locate 

CLINTON,  follow  her  to  the  SCIF,  snei  assist  as  needed  with  the  incoming  fax.  He  was  never  in  the  SCIF 
to  receive  a fax  without  CLINTON  pres^  arid  never  physically  picked  up  any  of  the  documents 
received.  If  the  fax  was  not  working.  State  would  sometimes  send  a courier  with  documents  or  a 

diplomatic  pouch  to  the  Chappaqua  residence.  On  those  occasions would  escort  the  courier 

from  the  gate  to  the  door  and  the  courier  would  hand  the  documents  or  pouch  directly  to  CLINTON. 
would  also  coordinate  the  repair  of  the  fax  when  broken. 

(U//FOUO)  ABEDIN  or  CHERYL  MILLS  would  sometimes  notify the  Presidential 

Daily  Brief  IPDB)  would  be  coming  via  secure  fax  to  the  residence.  As  described  above  with  other 
secure  faxes  [would  locate  CT.INTON  and  assist  with  the  incoming  secure  fax.  The  PDB  was 

also  hand  cairied  to  the  residence  on  occasion  and  would  escort  the  courier  to  CLINTON. 

n I/(FOTTO''^  meriqdicallv  received  emails  from  ABEDIN  with  attached  documents 

intended  for  CLINTON. ^would  print  the  documents  and  give  them  to  CLINTON,  but  does  not 

know  what  happened  to  the  documents  after  CLINTON  was  finished  with  them.  Last  Name 

Unknown  handled  similar  duties  at  CLINTON’S  residence  in  Washington,  DC. 

(U//FOUO)  CLINTON  had  several  BlackBerrv  devices  over  the  course  of  time.  When 
CT  .INTON  had  issues  with  one  of  them,  [would  ask  COOPER  for  advice  on  how  to  fix  it. 

believed  CLINTON  had  a State  BlackBerry,  but  did  not  recall  a secure  mobile  phone. 


(U//F©fcie)[ 

(u//rouo)[ 


did  not  recall  setting  up  an  Apple  ID  or  iPad  for  CLINTON. 


id  not  recall  a secure  phone  in  CLINTON’S  bedroom. 


UNCLASS  I FIED//FQtje- 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  03/23/2016 


Chief  Executive  Officer  (CEO) 


interviewed  at  his  place  of  employment. 


and  his  email  address  is 


was 


telephone  number  is 


was  advised  that 


the  FBI  had  identified  37  login  attempts  to  the  APPLE  I CLOUD  account 


of  hdr22@clintonemail . com,  originating  from  three 


addresses 


was  provided  with  the  IP  addresses  that 


owned  IP 
made  the 


login  attempts.  After  being  advised  of  the  identities  of  th^ 
interviewing  Agents  and  the  nature  of  the  interview, 
the  following  information: 


provided 


he adquar t e Jj's  inf 
locations . 


^as  approximately | [employees  at  their  main 


provide  ^ 


I and  an  additional 


employees  in  other 
They 


including  m^nv  US 
components . 


has  a large  customer  base 


f 


overnment  agencies  and  Department  of  Defense 


1 


rovided  the  Agents  with  a demonstration  of  th^ 

I on  a laptop  in  his  office. 


hs 

hlC 


b4 

b6 

b7C 


b3 


Others . That  data  is  then 


and 


b4 

he 

b7C 


[provides  their  clients  with  two  basic  services : 1 ) their 

security  platform  can  be  used  to  link  and  search  for  current  social 


b6 


media  information  on  the  Internet;  and  2) 
social  media  monitoring  for  their  clients 


can  provide  on-going 
explained  that  the 


b7E 


utilizes  their  continuous 


b6 

b7C 

b3 

b7E 


b6 

b7C 


Investigation  on  03/23/2016 
h’ile  n 


at 


By  ^ 


CYBER 


Date  dictated 


N/A 


ITiis  document  contains  neither  recommendations  nor  conclusions  of  the  EBl.  It  is  the  property  of  the  FBI  and  is  loaned;  to  your  agency-  it 
and  its  contents  are  not  to  be  distributed  outside  your  ascncy. 


b7C 


F'’D-302a{Kev.  10-6-95) 

Continuation  of  FD-302  of  Interview  o] 


, On  Q3/23/2016.  Page  _2 


TTionitoring  service  to  generate  alerts  for  new  social  media  posts 


relating  to  current 
same  service  for  al 
whether  they  are  aware  of  it  or  not. 

Aloncf  with  searching  for 


Additionally, 


provides  that  b7c 
same  service  for  all  United  States  Department  of  Commerce  employees, 


b6 


b4 

b6 

b7C 


1 confirmed  that  two  of  the  three  IP  addresses  shown  to  him 

belong  to  | stated  that  the  third  IP  address  may  have 

been  assierned  to  them  in  the  past,  but  that  it  was  no  loncrer  active. 
The  I I is  assigned  to 


b4 

b6 

b7C 


field  was  displayed  without  a corresponding  password  field. 


b4 

b6 

b7C 


To  the  best  of 


recollection. 


I 


Lras  not  hired  by 


attributed  the  login 


HILLARY  CLINTON  or  anyone  on  her  behalf. 

attempt^  to  being _ cQnduc|:ed  by  one  of  their  -clients,  utilizing,  the 


platform. 


order  to  verify  that 


then  left  the  interview  for  a brief  moment  in 
J was  not  conducting  any  continuous 

monitoring  services  for  HlLLj^Y  CLlNTOMl^-  : 'Vh^^n  he  returned,  

confirmed  that  they  are  not.  | [stated  that  he  had  a co-worker  of 

his  search  for  CLINTON'S  name  within  their  Platform.  In  order  to 
protect  the  FBI's  inquiry  at  J had  the  co-worker  search 


for  CLINTON'S  name  in  the  system,  along  with  the  names  of  two 
additional  current  Presidential  candidates.  The  results  were ^ negative 
on  all  three  searches. 


b6 

b7C 


e’D^302a(Rev,  10-6^95) 
Continuation  ofFD-302  of 


interview  of| 


On  Q3/23/2016.  Page 


he 

bVC 


was  then  informed  that  the  hdr22@clintonemail . com  email 
account  was  published  in  NEW  YORK  TIMES  article  on  March  02,  2015, 

and  that  the  login  attempts  occurred  on  the  following  day. 

stated  that  this  made  sense  to  him.  Given  that  information,  he 

theorized  that  the  login  attempts  were  likely  made  by  one  of  their 
"good  guy"  clients,  possibly  to  conduct  a damage  assessment  on  the 
social  media  footprint  associated  with  that  email  adds^ess.  Hoj^ever. 

had  no 


stated  that  he  could  not  verify  his  theory,  as 


additional  data  to  corroborate  it. 


be 

b7C 


is  amenable  to  future  contact  with  the  FBI. 


be 

b7C 


HD‘302a(Rev.  10-6-95) 

Conlinuation  of  FD-302  of  Interview  o 


On  Q4/12/2Q16.  Page 


he 

hie 


I [recalled  sharing  several  emails  with  PRK  employees  recrarding 
clintonemail . com  domain,  [primarily  dealt  with[ but 


the  

remembered  that  there  were  a couple  of  other  PEN  employees  included  on 
the  exchanges.  I "I  then  went  to  his  office  and  printed  out  several 
email  between  him  and|  Those  printouts  are  enclosed  for  the 

file  in  a physical  lA  envelope. 


never  had  access  to  the  clintonemail , com  domain 

nor  do  thev  ho  si 

: any  of  their  company  services  on  PRN  networks.  The 
interactions  with  PRN  employees,  related  penetration 

extent  of 

testing,  and  t 
exchanges  that 

le  clintonemail.com  domain  are  documented  in  the  email 

provided  during  this  interview. 

[Identified 


.While  reviewing  the  emails  provided  by | ~|  SA 

nne  which  references  a public  news  article,  where  an  individual  named 


had  utilized  a scanning  tool  called  FIERCE  to 
identify  the  addresses  used  for  HILIiARY  CLINTON'S  (CLIHTON' s)  personal 
pmai 1 server ■ I Iprovided  that  the  referenced 


provided  that 


formerly 


managed  an  Internet  blog  where  he  posted  new  hacks  and_  exploits  on 
almost  a daily  basis.  A few  years  ago,  however. 


disccaitiniifid  publishing  his  findings  on  the  Internet 


that 


community . 


goes  by  the  name  of 


within  the 


went  dark  and 
provided 
hacking 


has  known 


c 


for  several  years. 


recalled  that 


a passion  for  music, 
business  that  put  on  large-scale  rock  concerts,  which  would  rival  that 


The  two  of  them  share 

a 


of  a Madonna-sized  concert. 
two  share  music  as  a common  bond.  Additionally 


recalled  that 
a blimp  company  that  provided  aerial 


the 


coverage  over  large  public  events. 
recalled  meeting 


which 


at  a Colorado  technical  event , 
referred  to  the  event  as  a leads 


event,  which  was  a technical  expo  in  Colorado  where  information 
technology  experts  could  exchange  ideas  and  i^etwork  with  one  another. 


During  that  event, 

SECRET  SERVICE  Agent , named 
another  prior  to  the  event. 


sPoke  on  a panel  with 


and  a US 


During  introcf^tions  with  one 


^recalled  USSS  SA  | | stating  to 


that  he  had  recently  served  a warrant  at  PRN.  □ surmised 


that  statement  to  relate  to  the  on-going  investigatior^  of  C 
email  server.  Agent  Note:  A follow-up  call  to  USSS  SA 


rINTON'  s 
identified 


hS 

hic 


hS 

hlC 


he 
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b6 

bVC 


warrant  referenced  in  that  conversation  was  served  in  support  of 
different  matter. 


1 

fi  ewa 

situ; 

It  ion 

has 

as  a "good  guy",  who  is  caught  in  a bad 


has  stated  his  frustrations  td 


regarding  the 
stated  that  it  has  had  a 


be 

b7C 


CLINTON  email  investigation.  ^ ^ 
direct  impact  on  PRN's  business,  and  that  they  have  spent  a large 
amount  of  tponev  in  legal  fees  related  to  the  matter.  Primarily, 
is  concerned  over  the  negative  publicity  that  PRN  has 


received  in  the  news  media.  Additionally,  PRN  has  been  asked  to  step 
out  of  certain  requests  for  proposals  (RFP' s)  as  a result  of  the 
investigation . 


In  adc^ition  to 
with  PRN'^ 

However, 


1 


has  been 


has  also  had  limited  interactions 
Last  Name  Unknown  (LNU) . 


primary  point  of  contact  at  PRN. 


When  asked  whether  or  not 


utilizes  the 


social  media  cyber  security  product, 

I |i.s  amenable  to  future  contact  with  the  FBI. 


stated  that  they  do  not 
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FEDERAL  BUREAU  O]^  INVESTIGATION 


I r of  birth  (DOB)  | [ was 

interv:i.^wed  bv  FfifiPiral  Bureau  of  Tnvpst  1 nat  1 nn  (FBI)  Special  Agents 


(SA) 

DAY 


and 


I 1 I the  law  offices  o: 

Pitney  located  at  One  Canterbury  Green,  Stamford.  CT  fif^Qni  ai 

-F  IT  l-Si'TLtJ'  . . I ^ 


-r  J tilLl  J_  i, 

present  for  the  interview  were  DAY  PITNEY  attorneys 

,-.1 r.  . \ ^ 


After  being  advised  of  the  identity  of  the 


and 


inrerviewing  Agents,  and  the  nature  of  the  interview 
the  following  information: 


provided 


is  currently  employed  as 

J located  at  101  Merritt  7,  Norwa] 

-k,  CT  06851,  and  has  h(=>lH  rha 

position  for 


to  UATTU. 


itior  to  that,  was 

and  worked  partly  as  the 


b6 
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b7C 


DATTO  is  a company  that  provides  products  and  services  to  small 
businesses  related  to  cloud  storage  and  disaster  recovery.  DATTO  had 
an  established  relationship  with  PLATTE  RIVER  NETWORKS  (PRN)  and 
provided  them  server  back-up  and  recovery  services  for  some  time. 
DATTO' s relationship  with  PRN  was  already  established  in  2013  when  PRN 
acquired  a new  contract  to  manage  an  email  server  with  a client  known 
to  DATTO  as  CESC.  At  the  time,  DATTO  did  not  know  who  PRN' s client 
CESC  was. 


When  PRN  reached  out  to  DATTO  in, May  2013  to  provide  back-up 
services  for  the  CESC  client  server,  PRN  requested  a slightly  ' 
different  service  from  DATTO  than  they  normally  request , Typically, 

PRN  would  request  that  DATTO  back-up  remotely  to  DATTO' s secure  cloud. 
For  the  CESC  client  server,  PRN  requested  that  the  server  be  backed-up 


Invesiigation  on  n/19/2015 
File  # 


dil 


Stamford  CT 


By  SA 


- 

^ ^ ‘ date  dictated  N/A 

SA 

This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI 
and  its  contents  are  not  to  he  distributed  outside  your  agency. 


It  is  the  property  of  the  FBI  and  is  loaned  to  your  agency^  it 
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locally  and  privately.  At  the  time  of-  this  request,  it  was  not  only  a 
new  request  for  PRN,  but  a non-standard  process  for  DATTO.  In  order  to 
affect  the  private,  local . storage  needs  for  PRN' s CESC  client,  PRN 
ordered  a SIRIS  2000  device  from  DATTQ,  but  forgot,  or  did  not  know, 
to  also  order  the  private  node  that  the  data  would  be  routed  to  and' 
stored  on.  Because  of  this,  the  default  -on  the  DATTO  configured  SIRIS 
2000  sent  the  CESC  server  back-up  data  remotely  to  DATTO' s secure 
cloud  and  not  to  a local  private  nods.  This  default  configuration  on 
the  SIRIS  2000  has  since  been  changed. 


I stated  that  PRN  must  have  known  data  was  being  logged  in 

DATTO' s secure  cloud  and  not  on  a local  private  node.  As  evidence, 

] stated  the  partner  portal,  that  PRN  had  log-in  credentials  to, 
eature  displaying  backed-up  data  and  options  to  delete  cloud  or 
stated  PRN  would  have  seen  their  back-ups  under 


Add  a 
delete  local 


I I 

delete  cloud.  Additionally,  [ 

t\tl  h ^ I 


, I was  shown  a document  provided  by 

DATTO  indicating  email  records  were  manually  deleted  from  thp  hatth 
secure  cloud  back-ups  of  the  'PRN  CESC' server  in  March  2015.  I 


stated  that  it  couldn't  have  been  a DATTO  employee  that  deleted  those 
email  records,  because  there  would  have  been  a work  ticket  indicating 
as  much.  Concern j.ng  the  IP  addresses  associated  with  the  March  2C15 


deletions, 


thought 


handling  the  connection  and 


WSfen' t 


was  the  DATTO  relay  server 
was  a local  host  connection. 


stated  PRN  had  log-in  credentials  on  the  partner  portal  that 
tied  to  one  employee,  so  he  did  not  know  who  from  PRN  logged 
■■  ~iven  time. 


sent  to  the  DATTO  cloud  through  Secure  File  Transfer 
j’TP)  from  the  local  DATTO  device  purchased  by  the  client. 

TO  devices,  for  different.,  clients,  are  synced  to  one  node 
data  storage.  Each  DATTO  device  is  segmented  on ' that  node 
tes  to  a directory  paired' with  the  corresponding  device, 
the  servers  is  partially  encrypted  and  a password  would  be 
cess  remotely. 


The  DATTO  server  farm  is  housed  in  Pennsylvania,  multiple  levels 
underground,  in  a secure  facility.  In  order  to  access  the  facility, 
you  must  be  a client  there  and  process  through  security,  which 

includes  a biometrics  scan.  The  cages  that  house  the  servers  are  also 
locked. 
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DATTO  virtualizes  systems  locally  on  the  DATTO  appliance  or 
remotely  in  the  DATTO  secure  cloud.  As  part  of  this  process,-  an' 
automatic  test  is  conducted  to  verify  the  virtualization  where 
screenshots  of  the  windows  login  screen  are  sent  to  DATTO  clients 
Many  of  DATTO' s clients,  to  include  PRN,  would  occasionally  get 
"backup  verification  -failure"  notices  showing  their  DATTO  device  was 
unbootable.l  i ’ 


, , indicated  this  notice  occurred  very  frequently  and 

almost  always  was  an  issue  involving  the  virtual  environment  and  not 
DATTO  actually  failing  to  maintain  back-ups  of  the  associated  servers. 
This  issue  was  usually  resolved  with  a handful  of  solutions  to  include 
changing  drivers  and  controllers  or  lengthening  windows  for 
verification. 
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■DATTO  never  altered  or  configured  the  retention  settings 
regarding  the  period  of  time  or  frequency  that  the  PRN  server  was 
backed  up.  The  retention  settings  are  set  by  the  client. 

On  08/13/2015,  after  the  CESC  client  was  known  to  DATTO  and 
lawyers  became  involved  regarding  the  retention,  preservation  and 
production  of  records  regarding  the  CESC  client,  DATTO  shipped  a new 
SIRIS  2000  device  to  PRN.  The  impetus . to  the  shipment  was  the 
realization  that  the  SIRIS  device  originally  purchased  by  PRN  was  not 
encrypted.  The  provision  of  the  new  SIRIS  dovi  ct^  initiated  by.' 

DATTO  and  brokered  by  their  attorney,|  [ datTO  provided  the 

device  to  have  increased  security  while  also  ensuring  continuity  of 
operation  on  the  server . 


stated  the  DATTO  secure  cloud  is  frequently  scanned  and 

he  has  no ■ knowledge  of  any  intrusion  or  deep  penetration  of  their 

stated  the  best  place  to  look  for  network  intrusion 


systems . 
is  the  sy 


stem  logs , 


■ , never  discussed  federal  records  retention  or  classified 

information  with  any  representative  of  PRN  or  CESC  * 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Records  Infosrssatioii  end  Dissejni.naticn  Seetioa,  i^'inchester^  Virginia 
was  iniuerv'iewed  at  FBI  Keadguarters , i^ashiiigcoii,  D*C.  After  being 
advised  of  the |_id£Lai,ities  of  tlie  intera^iev^irig  Agents  and  the  natnre  of 
the  in  t ernri.eaf  ^ 


provided  the  folio'wing  inforraation; 


teiepnona 


Management  Division  for  the 


Approxi.Tnately  6 weeks  ago, 

of  the  Dspaahaaapt  of  State  (STATS)  Freedom  of  I^if ormatiovi  Act 


received  an  email  from 


(FQIA)  section,  | | email  enclosed  copies  of  5 email  coromuni  cat  ions 

f X"om  f opener  Secretary  of  Sta,te  HTLLAI^Y  CBIISITON'  s privaiLe  email  account 
'Which  STATS  believed  may  contain  ■'■FBI  eguities . STATE  requested  the 
FBI  conduct  an  appropriate  claesif ication  review  of  the  emails  prior 


to  their  schedul^id  FOXA  ptrbl.lc  rel^a^se . 


advli^ed  these 


unc  1 a s s i f i e cl . 


hx^'i  on  a clasaixied  l sysrern  but  t^^ere  a^arked 

racogn:]x:Bd  that  at  least  1 at  the  email^^  appeared 


classified  and  fo'envardad  siame  to  the  Counter  terror  ism  X>j 
for  classification  review . These  emails  were  reviewed  bv  1 

^ision (CTD) 

an.d 

of  CTD , 

1 

relayed  these  findings  to  STATE  atv;  per  protocol. 

b6 


Records  Managenu^nt  Division,  b7c 


f;: 

has  been  et?!pioyed  in  the  Records 

b6 

b7C 


ly  1 week  iatert  STATE ^ s Office  of  Ijegal  Coiin^>ei  {OLC) 
and  s t i.on  e d t he  FB I ' h 53FCFST/  / de  t e r mi  nation. 


does  not  have  an  official  government  and  therefore  it  believed  the  FBI 
could  not  classify  a document  based  on  the  FGI  caveat . OLC  also 
advised  that  they,  not  the  FBI , are  the  judge  of  potential  harv:  to 


class  if 'V'  a document  baaed  on  those  conditions . 

as  such  remained  c la n s .1.  f. led  at  the  SECRET / /:^3>F0KR  X eve  1. . 

r irmlv 
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OTnonpiA... 


Bv 


Ttjis  nirtt.her  i^or  of  tho  FBf  ll  t propcay  of  Iho  t-B]  iind  h\  louiied  io  visur 

iifid  iB  ttvo  to  be  dj^stributceJ  oouid^  yo!.jr 


b3 
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ufi  D'S02  kriorvicw  o 

believed , ba.30d  on 
Authority  (OCA) , t 
accuratelv. 


mzimninziiM 

It  the  ertail  was 


, On07.3M0j5.  2 

an  Or  i gi  n.a  ,1  tM.a.8  n i f 1 ca  t i on 


class 1 


Led  properly 


thea-eafte^ 


^ received  a 


:all 


rofii 


of  tbe  Xncerna.tional  Operations  t3ix’'islon 
( XQI) ) o f t b.e  X'B  X , who  '^ore  s sur  e d ''  t itn  t o ch  anga  the  c 1 a a s i f .led  enia i 1 
to  urs.cXaBS,if led . indicated  be  had  been  contacted  by  PATEXCFL 

KEIib'EDY,  Uhdersecretas'"/  of  State,  who  bad  asked  his  assistance  in 
altering  the  email's  classification-  in  exchange  for  a '^qpi.d  pro  q'ao," 
adxf'is&d  thatf  is  exchange  for  tr.ark.ing  the  email  unclassified. 


STATE  would  reciprocate  by  aIlova.ng  t.he  FBI  to  place  more  Agents  in 
Goun tries  where  they  axe  presently  forbidden. 


a.  1 X 

IS 


_Lh- 


Fol  J.owing  tlic  a,bove  exchaiig'e , ] [ was  sumrao.ued  to  an 

agency"  meeting  at  STATE  to  discuss  matters  pertaining  to 
classification  review  of  pcndiiig  CLIbTOh  FOXA  mater  ials , 

official  from  STATE,  along  'with  repr‘eeentatives  from  CIA,  DIA 
ar^d  other  government  agencies  were  present.  PAX’RICK  KENNEDY  presided 
ov'er  the  mee tinge  During  the  canversation,  a participant  specif ics.lly 
as,k.ed  whether  any  of  the  emails  in  guest  ion  were  cla,a  si  filed  - k~1  ria 

eye  contact  with  KENNEDY  remarked,  ^ve'll  see,"  

believed  this  ',ca.e  ref  eren.ee  to  the  FBI'*  s ca,tegorlzation  of  the 
SECRET/ / N OFORN  ema .i .1  wli i c b KENNEDY  was  a t temp t ii^g  - to  i u f In ence  , In  a 
private  maetino  with  KENNEDY  following  the  all  agency  meeting,  KENNEDY 


a sxeo 


whether  the  FBI ^ could 
.unclassified?"  A.ccording  to 


'see  their  way  to  marking  the  email 
iXENNEDY  spent  the  next  15  minutes 


debati.ng  the  classification  of  the  email  and  attempting  to  influence 


the  FBI  to  chaxiae 


tne  email  was 


mamxvgs  - Since 


continued  to  assert  that 


appropriate ly  marked  SECRET/ /NOPOEN , KENNEDY  asked  wh 


else  in  the  FBI  be  could  spea.k  'with  on  the  matter. 
KENNEDY  to  NICHAS'X.  STEXNSACH,  Assistant  Director  of  CTD 


referred 


and 

the 


was  then  present  during  a conference  call  involving  KENNEDY 
STElh3.ACH  in  which  KEM^EDY  continued  to  prsssnxe  the  FBI  to  change 

to  unclas  s i f led . STS INSACH 
conversation,  KENNEDY  asked 


.7 1 a s H i.  fled  ma  r i ng's 
Prior 


Oli 

to 


the  eoiail 
ending  the 


s t a teioen  t s on 


refused  to  do  so . 

whether  the  FBI  or  STATE  would  conduct  the  puhli 
scatter . STEINBACH  adv'ised  KENNEDY  that  the  FBI  would  not  comment 
publicly  on  the  matter , The  conference  call  ended  and , according  to 


the  Associated  Fra 


( AP } publ  i she  d t he  s t o xv  wi  th  i.n  the  hour , 


Former  Secretary  of  State  CLINTON  appeared  in  front  of  the  press 


b6 

b7C 


fa6 

b7C 


fa6 

b7C 


b6 

fa7C 


Conuiisjaticxi  (?f  fi>302  of liviorvkw  o^: 

shortly  thersaf rer  to  deny  having  nent 
private  email  server. 


...  0;i  07/3i?a{?i5.  P:!gs 

cliissiried  emails  on 


ner 


believes  STATS  has  an  agenda  whicli  involves  minimising 
lassif led  nat'are  of  the  cIjIKTON  emaiis  in  order  to  protect  STATS 


i n.t  e.r  e s t s a nd  t ho  s e 


' f 


CbIBTCKh  Since 


above  incidents  / 


received  approximately  8 or  9 more  emails  from  STJiTE  involving  FBI 
equities^  1 of  which  be  believes  may  ba  classified  SBCRET//t?OFORhb 
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ALL  INFOBiSTIGH  CGtlTAIHED 

HEREIM  IS  UUCLASSiriEC 

CATE  10-05-2015  BY  J37J85T54  NSICC- 


|riLl)]i:RAL  BI1R1L4U  OF  IN V£STIGA1'K>N 


Date  of  ;rimsLrfntjo!!  09i'03/20l  ^ 


tx^tiretnem  on 


{U4TQUOi iFedem!  Enreau  of  Investigation  tTBl  a 

Irnernt^itatnai  Operations  Division  (lOii)).  xvho  h ctirronllv 
was  interviewed  int>ersoTt  Fv  I'BI  Stxeciai  Aaer^tsl 

at  a located  at 


Supervisory'  Sneciai  Aaent  (SSAil 


M: 

iaterview, 

_J 

tand 


provided  the  following  information; 


(U//FQliO}  As 


interacted  with  PATRICK  D KENNEDY.  U.S. 


Depatement  of  State  (DoS)  Under  Secretarv'  of  State  for  Management;  | [and  KENNFiDY  A 

relationship  was  professional.  The  two  got  along,  but  did  liot  agree  on  many  matters  related  to  the  FB!  Y 
role  and  autboritv  oversetts. 


(UhK)U©')  hi  late  Max--  or  earlv  Jung' 


KENNEDY  contacted  hinn 
BOf-FS  and  Executive  Assistant  Director  (: 
K.SsMKEEA’'  for  montlis  without  response. 


found  a tmte  on  his  desk  indicating 


jwus  snrprtsed,  as  both  his  Assistant  Director  (/YD)  JOIEN 
lAD)  ROBERT  ANDERSON,  had  both  beejt  trying  to  contact 


(I  men 


returned  KHN'MH-DYN  eaU,  KfENN'IiD  Y'  asked 


assiatfcice  ie  ebanainn  a classiltcalion  of  FBI  information  cotuained  in  art  e-mad.  KFNNF.DY  did  not 


>>H  1.1  ^ ■y.J-.Q.  J.  £.^  ^ ^ A Xh- 

J with  Ibe  e-maih  however,  he  tokl 


prov  

FBrs  Recorcis  Maiageii^ent  Divi^^ion  (RMD) 
document  vvci^t 


thal 


ot 


was  the  one  that  told  KENNm>Y  the 


KENNEDY  toh 


IthiU  the  FBFs  da^ssification  of  the  e-mail  in  question 


caused  probiems  for  KENNEDY  ax^d  KJENNEIDY  warned  to  classify  the  document  as  "'B9/'  KENNEDY 
funlier  stated  that  the  dasajikation  would  allow  him  to  archive  the  documOT^t  in  the  basenxent  of 
f)oS  never  to  be  seen  again.  was  not  sure  of  w!iat  i^HNN'EDY'^  meant  by  a ^^89''' 

chi^sific^tion  [Note:  B9  may  be  a reference  to  a FOIA  e^cemphon]. 


(U//F()UQ-j  Not  yot  knowhw:  the  e-niaiFs  coxitent, told  KENNEDY"  he  would  look 

into  the  e-Toaii  matter  if  KENNE.DY"  would  pro  vide  authority  concerning  the  EBEs  request  to  htcrcase  its 
[?ersf)nnel  in  Iraq. 
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on  09/0d/2{)1:5 


tteimefii  nor  cojK[ii:ikTtE'5  ofCiO  MU.  IX  ihc  pwpony  of  the  MU  imd  loamid  lo  yo^r  a 

?iBd  \u  lire  nol  io  bo  outj^ide  youragency. 


b3 

b7E 


b6 

b7C 


iJNCl.ASSU^fktjVmUO 


ofl’i>-i>02  af Jmarviow^lq 


.Ofi  0S/05/2O):>  JVjc 


b6 

b7C 


(lJ//rOUO)  i^bi ! ovvir^g  hift  co^tver.^^tion  witi)  KJ^NN Ir^DY | 
discuss  the  e-mail  of  coucem,  toki 


classified  by  the  FBI  CountoterroriSTn  Division  (CfD)  and  was  related  to  ttie  attacks  on  the  LfS. 


contacted 


to 


the  e-rnall  of  KI'^NNED Yb  concern  was 


jor.tsKned  ICI;NKEDY 


Consulate  in  Benghtizi,  Following  his  conversation  with] 

and  infonned  him  timt  there  was  no  way  he  could  assist  KENNEDY  with  declassifying  the  Inlbrn^ation 
contained  in  the  e-mail. 


(iJ/m 


told  ANDF.RSON  and  BOIJsS  ak>ut  KENNEDY^  recuesl  io 


declassify  the  e-ntai  l and 
did  not  discuss  tlie  content  of  the  c-trtail  with  them. 


response  denying  the  ability  to  do  .so,  howeverJ 
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4 HEREIII  IS  UNCLASSIflEC 

DATE  10-D5-201«  BY  J37JS5T34  HSICC 


FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  1/19/2016 


£y//TOUO)  On  December  16,  2015 


Owner  and  Chief  Technology  Officer 


was  interviewed  bv  Federal  Bureau  of  Investigation  (FBI)  Special 


fcid  SA 


Also  present  for  the  interview  was 


Agent  ( S A’ 


attomey|_ 


the  interview. 


I After  being  advised  of  the  identity  of  the  interviewing  agents  and  the  nature  of 
_piro' 


Provided  the  following: 


(U//rOU^  founder while  living  in  Chicago  and  currently  has  a family 

of  approximatelM  Employees  comprised  of  full  and  part-time  employees,  as  well  as  subcontractors. 

a business  associate  oj  I contacted  her  about  a client  who 


In  early  2013, . 

needed  a new  email  server.  Aftei|  expressed  an  interpt  in  the  project  and  understood  the  clients  - 


were  HILLARY  AND  WILLIAM  CLINTON 
few  other 


;s 

31 


^ut  her  in  contact  with  CHERYL  MILLS. 

personnel  assisted  with  invoicing  and  technical  aspects  of  the  contract,  bui 


most  of  the  work  herself, [primary  contacts  were  MILLS  and  BRYAN  PAGLIANO;  MILLS 

helped  produce  the  nroposal  and  PAGLIANO  assisted  in  developing  the  requirements  for  the  server 
architecture,!  started  the  discussion  by  providing  a range  of  options  from  low-cost  Gmail  to  a 


A 

did 


more  sophisticated  private  server.  She  understood  the  client’s  impetus  for  the  project  to  be 
reliability/uptime  and  security  in  the  wake  of  a situation  where  the  client’s  private  server  housed  in  their 
residence  experienced  one  w^ek  of  downtime  because  of  a storm.  The  client  selected  the  private  server 


from  the  options  provided  by 


was  not  involved  in  those  decisions 


Backup  systems  were  planned  for  Phase  2 of  the  project,  but 


(U//FOUO)  As  part  of  the  initial  conversations  with  PAGLIANO  and  MILLS 
one  point  the  domains  and  number  of  email  accounts  on  the  server,  but  could  not  recal 


new  at 


1 those  details. 


Additionally 

equipment  maintained  by  PAGLIANO. 


[had  no  knowledge  of  email  servers  owned  or  operated  by  the  client  prior  to  the 


(L)//FOUO)  After  the  client  selected  a private  server! 


contacted  two  firms  she  had  prior 
experience  with:  GRAVITAS,  a large  Information  Technolo^  firm,  and  PLATTE  RIVER  NETWORKS 


IPRNi. 

and 


a small  boutique  fiirn.  After  the  client  selected  PRN, 


or  two  meetings; 


Him. 

3i( 


develop  the  details  of  the  projeHl 


worked  with  MILLS,  PAGLIANO, 
was  only  involved  in  one 


elieved  he  was  curious  about  the  process.  PAGLIANO  handled  the  technical 


aspects  of  the  project  and  MILLS  handled  strategic  concerns.  As  PRN  took  over  day-to-day  management. 
nvolvement  gradually  faded  out.  The  client  occasionally  reached  out  for  assistance  anq 


would  help  w'here  she  could.  Payment  for  her  services  was  billed  for  the  entire  task,  not  hourly,  so  she 
did  not  charge  any  fee  for  this  assistance. 
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(UATOUQ) 


Jbelieved  a Cloud  Jacket-type  security  device  was  part  of  the  project  design,  so 


when  it  wasn’t  part  of  the  initial  install,  she  pushed  for  the  implementation  of  it  after  the  migration  froth 
the  PAGLIANO  server  to  the  PRN  server.  During  the  migration  she  was  not  in  the  weeds,  but  knew 
enough  to  know  it  was  done  correctly  from  a security  standpoint.  | ] was  not  aware  of  any  security 

intrusions  or  compromises  while  she  was  involved  in  the  day-to-day  operations  of  the  transition,  nor  was 
she  brought  back  in  after  the  fact  on  any  securit}?  issues.  In  addition  to  the  CloudJacket,  as  part  of  the 
security  considerations,!  [discussed  transitioning  from  BlackBerries  to  the  iPhone  with  the  client,  as 

well  as  blocking  international  access  to  the  server;  Ultimately,  the  client  chose  to  stay  with  BlackBerries 
and  international  blocking  was  declined  because  the  client  frequently  traveled  internationally. 


public 


rU//FOUO~l  Since  press  reports  ofl 


association  with  PRN  and  the  CLINTON’S  went 
[and  some  partners  contracted  Denth  Security  to  conduct  Vulnerability  Threat 

was  not  aware  of  any  such  assessment  conducted 


Assessments  for  some  of  their  shared  clients, 
on  the  CLINTON’S  server. 


(u//Fewe)| 

PRN  servers; 


had  no  knowledge  of  the  following  topics  as  they  relate  to  the  PAGLIANO  or 


• moving  emails  to  a new  domain 

• laptop  backups 

• temporary  backups 

• classified  information 

• federal  records 
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DATE  10-05-2016  BY  J37JS5T34  HSI 


FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  05/26/2016 


(U//rOUO)  On  May  23, 2016J | date  QfbirthI I w;^<;  interviffWffH 

by  Federal  Bureau  of  Investigation  (FBI)  Special  Agents  (SA) and 

at  the  offices  of  Platte  River  Networks  (PRNI  located  at  5700  Washington  Street,  Denver'  f^lnlnradn  ' 

80216.  Also  present  for  the  interview  was] and  via  speaker  phone, 

both  attorneys  at  the|  _ After  being  advised  of  the  identity  of  the  interviewing  agents  and 

the  nature  of  the  interview.  provided  the  following  information: 

Servififi 

ood| I 

;alled  he 
:ESC  in 
!ESC  most 


fU//FOUOl  I was  given  PRN  administrator  credenti 

Comnration  fCRSO  email  server,  but  could  not  recall  logging  in  t 

[were  in  charge  of  handling 

assisted  with  the  CESC  client  less  than  five  times.  He  recalled  he  o 
updating  their  operating  system.|  | talked  to|  ' Last  N 

times. 


(U//F©t?0)| |was  not  aware  of  a laptop  containing 

HILLARY  CLINTON  that  was  shipped  to  PRN  around  February  2 
became  of  the  foregoing  laptop. 


gto 
: what 


fu/ffeHei|  I was  not  aware  of  any  support  PRN  provided  the  CESC  client  from  October 

2014  to  January  ^015.  was  not  aware  of  any  CESC  request  to  delete,  wipe  or  shred  their  email 

records.  was  not  aware  of  any  email  content  being  transmitted  to  CESC. 


(U//TOHe)Atthis] 
the  March  2015  timeifame. 


e interview,  Agents  displayed  PRN  provided  records  and  email  from 
ffovided  the  following  information: 


(U//FOUO) was  not  aware  of  a trip  made  by  PRN  employee[ 

Equinix  data  center  in  Secuacus,  New  Jersey. 


(U//FOUO)  After  Agents  displayed  m email  dated  March  09,  2015  where  CHERYL  MILLS 
discussed  preservation  of  materials,  |had  no  knowledge  of  the  email  or  any  request  by  any  entity 

to  preserve  CESC  related  data. 


Investigation  on  05/23/201 1 


Denver.  Colorado 


File# 


Date  dictated  N/A 


FD-302a(Rcv.  10-6-95) 


Continuation  of  FD-302  of Interview  oj  I , On  07/23/2015  . Page  2 

nJ//F0tJ0l  |has  no  reconection  of  a conference  call  on  March  25, 2015  or  March  31,  2015 

with  CESCJ  stated  CESC  never  requested  their  email  content  by  deleted,  wiped  or  shredded. 


(U//FOUO)r  I was  unaware  of  any  PRN  employee  conducting  manual  deletions  of  the 


DATTO  device  used  to  back-up  the  CESC  email  server, 

(uz/Fewe; 


jwas  unaware  of  any  successful  computer  intrusion  of  the  CESC  server, 

Iwill  be  maintained  in  a 


(U//FOUO)  Notes  of  the  interview  and  documents  displayed  to 
FD340  envelope  and  filed  with  the  captioned  investigation. 
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.1. 

FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcnption  6/29/20 1 6 


On  June  29,  2016 


Special  Agei™ 
the  call,  wasL 


was  interviewed  tc. 


[Assistant  to  President  William  J.  Clinton^ 

enhonicallv  by  Feder^  Bureau  of  Investigation  fFBl 


Representing 


and  also  present  for 
I from  The  Department  of  Justice 


(DoJ)  Counterintelligence  and  Export  Control  Section  also  participated  in  the  call,  j^er  being  advised  of 

the  identities  of  the  interviewing  agents,  and  the  purpose  of  the  interview, provided  the 

following  information: 


didf 


n iz/rniin 


Ever  use  Tor. 


[was  not  familiar  with  Tor,  which  enables  anonymous  communication,  nor 
described  herself  as  a “very  low  tech  person.” 


(u//roue)| 

her  @presidentclin 

occasions,  a laptop, 

computer  at  the  Clinton  Foundation 
was  not  sure  of  the  specific  version 
sign  onto  her  email. 


jUsed  various  communication  devices  and  computer  to  remotely  sign  into 
on.com  email  account.  These  devices  included  an  iPhone,  BlackBerry,  and  on  rare 
' ^so  accessed  her  @presi dentclinton.com  email  account  from  her  desktop 


p desktop  computer  operated  off  of  Windows,  but  she 
liurther  stated  that  she  used  an  Apple  Mac  on  occasion  to 


(U//FOUOI 


. _ . ^ lid  not  recall  experiencing  any  unusua 

related  to  her  @presi dentclinton.com  email  account  in  January,  2013. 
January  5,  2013. 


spam  or  phishina  email  activity 
Iwas  in  New  York  on 
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ALL  IWrORMATION  CONTAIMEE 

HEREIN  IS  Ul^CLASSIFIED 

DATE  10-05-2D16  BY  337JS6T94  MSICC 


FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  09/21/2015 


On  Sq^iember  14,  201 5J 
sod^  s^i:\ir-xty  number! 

Agent  (SaC:.  ■ landSAf 


Platte  River  Networks,  date  of  birtl£ 


Ifrom 


}was  interviewed  bv  Feder^  Bureau  of  Investigation  (FBI)  Special 

Also  present  for  the  interview  was 

and  Department  of  Justice  (DOJ)  AttomevI  I 


i I— I ^ I 

After  being  advised  of  the  identity  of  the  interviewing  agents  and  the  nature  of  the  interview, 

j ^1-  . r*.  11  - 


provided  the  following: 


In  February  or  March  2013J 


Ivas  informed  by 


at  Platte  River  Networks  (P  Wk  of  a potential  contract  managing  email  for  a high 

proftle  client,  but  did  not  know  who  the  client  was. was  not  involved  in  the  proposal  or  technical 

solution  for  the  client,  nnr  did  he.  have,  anv  first  hand  meetings  witl^  anyone  representing  the  client. 


and 


andled  those  matters. 


eventually  learned  the  client  was  WILLIAM  CLINTON  and  HILLARY  CLINTON  (CLINTON),  doing 
business  through  a company  named  CESC.  At  some  point  during  the  process,  CESC  conducted 
background  checks  on  the  individuals  who  \yould  provide  the  technical  suPTmrt  for  the  contract.  Those 
individuals  were  I J and  Idid  not  know  why  CESC 


conducted  the  background  checks,  but  assumed  it  was  because  they  were  a high  profile  client. 


On  or  about  March  2015, 


first  learned  about  concerns  regarding  CLINTON’S  use  of  a 

private  email  server  when  it  was  reported  by  the  media.  Due  to  this  increased  attention,  PRN  decided  to 
place  Internet  Protocol  tlPJ  country  blocks  and  took  other  additional  steps  to  secure  the  CESC  server.  In 
the  same  timeffamej  jparticipated  in  a conference  call  with  CLINTONN  counsel,  Williams  and 


Connolly,  to  detemiine  where  p.INTONN  email  was  stored.  Whilej [vas  on  the  call, 


IncJ 


^ ^handled  most  of  the  questions.  Subsequently,  PRN  received  a preservation 

letter  from  the  United  States  Senate  and  a preservation  request  from  the  FBI.  PRN  brought  their  own 
counsel  on  board  to  assist  with  these  requests. 

After  receiving  the  FBI’s  preservation  request,  PRN  received  a letter  from  Williams  and  Connolly 
instructing  them  to  give  the  FBI  the  CESC  server  used  prior  to  migrating  email  to  PRNaauiiied 
eouipment. 


_ traveled  to  New  Jersey  and  turned  over  the  server  to  the  FBI. 
did  not  povver  up  the  server  before  providing  it  to  the  FBI. 


^tated 


The  CESC  email  server  architecture  also  involved  a DATTO  backup  appliance.  The  DATTO  was 
configured  to  store  backup  data  locally,  however,  due  to  a glitch,  DATTO  backed  up  data  to  their  cloud 
for  a period  of  time.  On  or  about  August  24,  2015,  DATTO  sent  PRN  a letter  stating  they  would  stop 
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backing  up  to  their  cloud  and  preserve  5vhat  was  in  their  possession.  The  DATTO  has  a 60  day  purge 
cycle,  therefore,  DATTO  should  have  data  from  60  days  prior  to  August  24,  2015. 


itated 

and 

email  server  project 


classified  information  on  the  server 


^would  have  specific  details  regarding  the  CESC 

never  heard  anyone  related  to  the  CESC  project  discuss  the  existence  of 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  05/26/2016 


njsi 


date  oflMll 


jand  Sa[ 


was  interviewed 


(U//FOUO)  On  May  23,  2016 

by  Federal  Bureau  of  Investigation  (Ffjl)  Special  Agents  (SA)| 

at  the  offices  of  Platte  River  Networks  fPRNl  located  at  5700  Washington  Street,  Denver.  Colorado 

8021 6.  Also  present  for  the  interview  was and  via  speaker  phone,[ 

both  attorneys  at  th( 


b6 

b7C 


the  nature  of  the  interview! 


After  being  advised  of  the  identity  of  the  interviewing  agents  and 


provided  the  following  information: 


(U//FOUe) 


was  not  aware  of  a laptop  containing  an  archive  of  email  belonging  to 


FIILLARY  CLINTON  that  was  shipped  to  PRN  around  February  2014. 
became  of  the  foregoing  laptop. 


was  not  aware  what 


(u//rouo) 


only  recently  was  made  aware  of  a CLINTON  email  archive  file  being 


trmsmitted  to  the  Clinton  Executive  Services  Corporation  (CESC)  around  July  2014  and  Sentemher  201 


b6 

bVC 


b6 

bVC 


as  it  was  occunine[ 


was  not  aware  of  the  request  by  CESC,  or  transmittal  by 


was  not  aware 


fulfilled  the  requesu 


of  what  specifically  was  requested  by  CESC  or  exactly  how 
never  spoke  with  anyone  at  CESC. 


(u//Few©)| 

2014  to  January  2015| 
records. 


was  not  aware  of  any  support  PRN  provided  the  CESC  client  trom  October 
was  not  aware  of  any  CESC  request  to  delete,  wipe  or  shred  their  email 


b6 

b7C 


(U//Fe«e)Atthis 
the  March  2015  timefiameJ 


point  in  the  interview,  Agents  displayed  PRN  provided  records  and  email  from 
provided  the  following  information: 
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b7C 


(UZ/TOUQ)  In  March  2015,  when  various  media  outlets  reported  a private  email  domain  and 
server  was  used  by  HILLARY  CLINTON,  PRN  decided  to  create  an  internal  “share  drive”  and  control 
access  to  only  the  PRN  employees  working  the  CESC  account.  PRN  never  deleted  information  pertaining 
to  the  CESC  client  and  provided  the  FBI  all  records  they  maintained  pertaining  to  CESC. 


(U//FOUO)  In  March  2015  J 


stated  PRN  employee 


tn 
id  ti 


travelled  to  the 


Equinix  data  center  to  check  the  security  of  the  servers  and  to  ensure  they  were  “locked  tight.”  After  the 
media  reports,  PRN  was  even  more  concerned  about  the  security  of  the  server. 
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(U//FOUO)  After  Agents  displayed  an  email  dated  March  09,  2015  where  CHERYL  MILLS 


discussed  preservation  of  materials. 


CESC  related  datd 


J could  not  recall  any  other  request  by  any  entity  to  preserve 

Jreceived  guidance  lyom  PRN  attorneys  and  understood  CESC  client 
information  and  records  should  not  be  destroveq 


to  CESC  records  and  not  necessarily  email  content, 
request  ftom  the  government. 


believed  the  preservation  request  applied  more 
[believed  the  preservation  request  to  be  a 


(U//EQUO) 


31. 2015  with  CESq 
shredded.  had  a memory  of  a request  by 

:ing,  but  could 


working,  but  could  not  recall  the  specific  request, 
policy  changed  to  60  days. 


jrad  no  specific  recollection  of  a conference  call  on  March  25,  2015  or  March 
stated  CESC  never  requested  their  email  content  by  deleted,  wiped  or 
ESC  to  confirm  their  server  back-ups  were  still 

was  aware  CESC  wanted  their  email  retention 


(U//fet^©X 


was  unaware  of  any  successful  computer  intrusion  of  the  CESC  server. 

will  be  maintained  in  a 


(U//FOU0')  Notes  of  the  interview  and  documents  displayed  to 
FD340  envelope  and  filed  with  the  captioned  investigation. 
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G FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  08/17/2015 


On  August  17,  2 015,  KATHERINE  M.  TURNER,  Partner  at  the  law 
offices,  of  Williams  & Connolly  LLP,  725  12*^^^  Street,  N.W.  Washington, 
D.C.  met  at  her  place  of  employment  with  Agents  of  the  FBI  to  discuss 
voluntarily  turning  over  six  (6}  laptop  computers  in  her  possession 
known  to  contain  Top  Secret  classified  information.  Also  in  attendance 
were 


I 


of  the  FBI's  Office  of  General  Counsel, 


Department  of  Justice,  f 
Connelly  LLP,  and|^ 


Trial  Attorney  for  the  Counterespionage  Section  at  the 


an  attorney  with  Williams  & 
counsel  for  CHERYL  MILLS,  from  the 


law  offices  of  Paul,  Weiss,  Rif kind,  Wharton  & Garrison  LLP, 


b6 

b7C 


Prior  arrangements  had  been  made  to  meet  at  this  time  and  place 
to  discuss  an  agreement  through  which  Williams  & Connelly  would 
voluntarily  turn  over  to  the  FBI  six  (6)  laptops  computers  used  by  the 
firm  to  view  email  communications  from  the  private  server  of  former 
Secretary  of  State  HILLARY  CLINTON.  TURNER  acknowledged  that  these 
laptops  contain  Top  Secret  email  communications  and  attorney /client 
privileged  communications.  TURNER  sought  to  turn  over  the  laptops  as 
soon  as  possible  but  wished  to  ensure  that  privileged  communications 
on  the  laptops  would  remain  confidential.  TURNER  declined  to  provide 
consent  to  search  the  laptops  and  wished  to  arrange  for  secure  storage 
of  them  in  a manner  agreeable  to  both  the  FBI  and  the  attorneys . The 
FBI  agreed  to  provide  TURNER  with  a draft  letter  outlining  the 
proposed  conditions  of  storage  as  soon  as  possible. 


Contrary  to  statements  made  on  August  6,  2015,  TURNER  advised 

that  only  five  of  the  six  laptops  are  in  the  possession  of  Williams  & 


Connelly,  the  sixth  being  in  the  possession  of 
counsel  for  CHERYL  MILLS,  former  Chief  of  Staff  for  CLINTON, 
admitted  that  the  computer  in  his  possession  has  been  connected  to  the 
Internet  on  numerous  occasions  subsequent  to  being  loaded  with  the 
classified  email  communications  of  HILLARY  CLINTON.  This  laptop  was 
possessed  by  CHERYL  MILLS  but  utilized  by  HEATHER  SAMUELSON,  an 
attorney  on  her  staff,  to  conduct  a review  of  approximately  60,000 
emails  originally  contained  on  CLINTON'S  private  email  server. 


According  to 


SAMUELSON  deleted  CLINTON'S  personal  emails 
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Investigation  on  08/17/2015 
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Washington.  D.C. 
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from  the  original  60,000  resultincr  in  the  30,490  emails  eventually 


turned  over  to  the  FBI . 


claimed  the  other  emails  had  been 


deleted  from  the  laptop  but  was  unable  to  specify  whether  they  had 
been  forensically  wiped  to  an  unrecoverable  state. 


Both 


and  TURNER  admitted  that  the  emails  contained  on 
these  laptops  had  been  viewed  by  attorneys  who  did  not  have  a security 
clearance  at  the  time  they  reviewed  the  material.  TURNER  said  the 
emails  did  not  contain  classification  markers  and  thus  they  were  not 
aware  that  they  were  classified  at  the  time. 
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Date  of  transcription  12/1 1/2015 


(U//rOUe)  On  December  10,  2015 


date  of  birtH 


of  the 


Office  of  the  Legal  Adviser,  Financial  Disclosure  Division.  U.S.  Department  of  State  was  interviewed  by 
Federal  Bureau  of  Investigation  (FBI)  Special  Agents  land  | Also 

present  wer  j JXrial  Attorney,  Public  Integrity  Section,  U.S.  Department  of  Justice  and[ 


Attorney  Adviser,  U.S.  Department  of  State.  After  being  advised  of  the  identities  of  the 


interviewing  agents,  and  the  purpose  of  the  interview, 


jprovided  the  following  information: 


(U//¥eUe)  In  2009 


worked  as  an  Ethics  Analyst  for  the  U.S.  Department  of  State. 


She  was  responsible  for  reviewing  the  Financial  Disclosure  Forms  (SF-278)  of  new  and  current 
employees  to  assess  if  their  investments,  or  outside  income  sources,  created  a conflict  of  interest  with 
their  position  at  the  U.S.  Department  of  State.  When had  questions  about  the  filer’s  SF-278 


she  would  contact  them  directly,  either  telephonically  or  via  email,  to  clarify  the  filer’s  responses. 

vould  then  amend  the  SF-278  to  reflect  any  corrections  or  clarifying  information  provided  by 


the  filer.  She  would  then  send  a copy  of  the  updated  SF-278  to  the  filer  for  their  personal  records.  Once 
the  .SF-278  was  finalized  an  assessment  was  made  on  whether  the  filer’s  investments,  or  other  financial 
interests,  posed  a potential  conflict  of  interest.  The  assessment  was  then  signed  off  on  bj 
supervisor,  | Upon  completing  the  review  a physical  file  containing  the  SF-278  and 


supporting  documents  were  maintained  for  a finite  period  of  time  before  it  was  destroyed. 


(u//Feue) 


was  shown  copies  of  the  following  documents: 


New  Entrant  SF-278  submitted  by  BRYAN  PAGLIANO  on  April  15,  2009 

Email  frorr  to  PAGLIANO  dated  August  25,  2009,  with  the  subject  “Ethics 


Clearance...  (Reply  Requested)” 

New  Entrant  SF-278  submitted  by  BRYAN  PAGLIANO  on  April  15,  2009,  with 
handwritten  updates 

Incumbent  SF-278  submitted  by  PAGLIANO  on  April  4,  2010 


(U//FOUO)  After  reviewing  the  documents] 


confirmed  that  she  had  sent  the  above 


referenced  email  to  PAGLIANO  to  clarify  some  of  his  responses  on  his  original  SF-278.| 
provided  that  the  email  contained  her  original  message  to  PAGLIANO  and  did  not  appe^  to  have  been 
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altered  in  any  way. 


also  confirmed  that  it  was  her  handwriting  on  the  updated  New  Entrant 


SF-278  form  and  that  the  handwritten  notes  reflected  additional  information  provided  by  PAGLIANO  in 


response  to  her  email. 


could  not  recall  any  additional  information  about  her  exchange  with 


believed  that 


PAGLIANO,  aside  firom  what  she  had  written  on  the  updated  SF-278. | 

PAGLIANO  had  provided  the  updated  information  to  her  via  email  but  she  no  longer  had  those  emails 
because  she  purged  her  emails  when  she  changed  positions  at  the  U.S.  Department  of  State, 
further  noted  that  the  physical  file  could  not  be  found  and  had  likely  been  destroyed. 


(U//FOUO) 


she  did  not  conduct  the  review  of  that  dornment 
stated  that  they  were  not  her  handwriting. 


peviewed  the  Incumbent  SF-278  form  filed  by  PAGLIANO  and  noted  that 

pointed  out  the  checkmarks  on  the  form  and 


kiid  not  know  who  reviewed  the  form  but  stated  that 


should  be  able  to  identify  the  reviewer  based  on  internal  computer  records. 


(U//FOU©)  With  respect  to  the  Incumbent  SF-278  form  filed  for  2009| 


stated  that  all 


income  and  compensation  fi'om  2009  should  have  been  captured  in  Schedule  A.  This  includes  any 
income  in  the  calendar  year,  even  if  it  was  received  prior  to  his  start  date  with  the  U.S.  Government. 

loted  that  the  only  exception  to  this  would  be  if  the  income  was  from  another  government 


entity.  However,  income  from  a political  action  committee  or  another  campaign  related  organization 
would  not  qualify  as  other  government  employment. 


(U//FOUej 


noted  that  in  2009  the  filer  would  have  been  provided  with  several  pages  of 


provided  an  electronic 


instructions  on  how  to  correctly  and  accurately  complete  the  form, 
copy  of  the  instructions  to  the  interviewing  agents. 

(U//FOUQ')  A copy  of  the  above  referenced  documents  and  the  original  interview  notes  are 
attached  in  a 1 A envelope. 
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Date  of  transcription  09/02/2015 


On  September  2,  2015, 

Homeland  Security  Investigations  (HSI 
Security  (DHS) , Norfolk  Virginia,  was  interviewed 


a Special  Agent  with 
Department  of  Homeland 
at  the  Federal 


Bureau  of  Investigation  (FBI) . After  being  advised  of  the  identity  of 
the  interviewing  Agent  and  the  nature  of  the  interview, 
provided  the  following  information: 


I I was  previously  an  agent  with  the  U.S.  Department  of 

State,  Bureau  of  Diplomatic  Security  (PS) . I I left  DS  in 

approximately  spouse,  | was  also  a 


prior  DS  agent  who,  from  2007-2009,  served  as  an  Assistant  Shift 
Leader  on  former  Secretary  of  State  CQNpOLESZZA  RICE'S  and  HILLARY 

CLINTON'S  protective  details.  served  briefly  on  foinner 

Secretary  CLINTON' s protective  detail  in  2009.  From  her  own 
experience . and  information  obtained  through  and  other  agents, 

described  a "stark  difference"  between  RICE  and  CLINTON  with 
regard  to  obedience  to  security  and  diplomatic  protocols.  RICE 
observed  strict  adherence  to  State  Department  security  and  diplomatic 
protocols  while  CLINTON  frequently  and  "blatantly"  disregarded  them. 
For  example,  it  is  standard  security  and  diplomatic  protocol  for  the 
Secretary  of  State  to  ride  in  the  armored  limousine  with  the  local 
U.S.  ambassador  when  traveling  in  countries  abroad.  It  is  seen  as 
diplomatic  protocol  for  the  Secretary  of  State  to  arrive  at  foreign 
diplomatic  functions  with  the  local  ambassador;  however,  CLINTON 
refused  to  do  so,  instead  choosing  to  be  accompanied  in  the  limousine 
by  her  Chief  of  Staff,  HUMA  ABEDIN.  This  frequently  resulted  in 
complaints  by  ambassadors  who  were  insulted  and  embarrassed  by  this 


breach  of  protocol.  | | explained  that  CLINTON'S  protocol 

breaches  were  well  known  throughout  Diplomatic  Security  and  were 
"abundant . " 


CLIN 


explained  that  ABEDIN  possessed  "much  more  power"  over 
TON' s staff  and  schedule  than  other  former  chiefs  of  staff, 
believed  that  ABEDIN  herself  was  often  responsible  for 
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On  a trip  to  Jakarta,  Indonesia,  in  early  2009,  CLINTON  requested 
to  visit  an  area  of  Jakarta  that  presented  security  and  safety 

challenges , This  visit  was  reportedly  for  a photo  opportunity 
regarding  CLINTON'S  "clean  cooking  stoves"  initiative.  The  DS  advance 
team  recommended  against  traveling  to  this  area  because  the  route 
could  not  be  secured  and  was  lined  with  dangerous  circumstances  and 
individuals.  As  such,  the  DS  advance  team  recommended  in  writing  that 
this  excursion  be  stricken  from  the  schedule  but  were  told  by  DS 
management  that  it  was  going  to  happen  because  "she  wanted  it."  DS 

agents  felt  this  excursion  into  potentially  hostile  areas  placed 
CLINTON,  her  staff,  the  media,  and  her  security  detail  in  unnecessary 
danger  in  order  to  conduct  a photo  opportunity  for  "her  election 

campaign."  DS  agents  had  the  perception  that  CLINTON  was  using  her 
position  as  Secretary  of  State  to  campaign  for  President  of  the  United 
States.  DS  agents  felt  CLINTON  traveled  with  hand-picked  media  who 
would  present  her  in  favorable  light  in  order  to  garner  political 
support . It  was  also  believed  that  CLINTON  disregarded  security  and 
^ipio™3.tic  protocols,  occasionally  without'  regard  for  the  safety  of 
her  staff  and  protection  detail,  in  order  to  gain  favorable  press, 

CLINTON  traveled  in  an  armored  vehicle  whose  passenger  windows  do 
not  open.  This  is  a design  feature  for  the  protection  of  the 

occupants.  However,  the  driver's  window  does  open  slightly.  On  one 
occasion  while  traveling  to  Palestine.  CLINTON  ordered  the  limousine 


driver,  believed  to  be 


to  open  the  window  while  in 


occupied  territory" , rdi erring  zo  a aangerous  area  of  the  West  Bank 


declined  to  respond  to  CLINTON'S  request;  however, 
repeated  demands  by  CLINTON  forced  him  to  open  his  window  despite  the 
danger  to  himself  and  the  occupants. 


, explained  that  security  and  diplomatic  breaches  were 

often  communicated  from  the  foreign  post  back  to  the  Department  of 
State  via  cables  from  the  Regional  Security  Officer  (RSO)  . ThaHP 
cables  often  described  incidents  like  those  described  above. 


recommended  interviewing  current  and  former  RSOs  from  foreign  posts 
visited  by  CLINTON  during  her  tenure  for  more  detail  into  these  and 
similar  events . 


b6 

bVC 


b6 

bVC 


b6 

b7C 


Early  in  CLINTON'S  tenure  as  Secretary  of  State,  she  and  her 
staff  were  observed  removing  lamps  and  furniture  from  the  State 
Department  which  were  transported  to  her  residence  in  Washington,  D.C. 
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[does  not  know  wnether  these  items  were  ever  returned  to  the 

government  upon  CLINTON'S  departure  from  the  State  Department. 


Despite  having  her  own  DS  security  detail,  CLINTON  continued  to 
utilize  a Secret  Service  security  detail  while  at  her  residence  in 
Chappaqua,  New  York.  DS  security  would  meet  Secret  Service  security  at 
the  airport  in  New  York  and  turn  over  protection  to  them.  This 
practice  was  unknown  to  DS  prior  to  CLINTON' s tenure  and  often 

presented  logistical  problems  to  both  services.  explained 

that  CLINTON'S  treatment  of  DS  agents  on  her  protective  detail  was  so 
contemptuous  that  many  of  them  sought  reassignment  or  employment 
elsewhere.  Prior  to  CLINTON'S  tenure,  being  an  agent  on  the  Secretary 
of  State's  protective  detail  was  seen  as  an  honor  and  privilege 
reserved  for  senior  agents.  However,  by  the  end  of  CLINTON'S  tenure, 
it  was  staffed  largely  with  new  agents  because  it  was  difficult  to 
find  senior  agents  willing  to  work  for  her.  :;laimed  to  have 

had  at  ■ least  one  conversation  with  Secret  Service  agents  who 
experienced  the  same  poor  treatment. 


Inside  CLINTON'S  office  at  the  Department  of  State  there  is  a 
security  checkpoint  known  as  "Post  1."  Post  1 is  staffed  by  a 
uniformed  DS  officer  and  a DS  agent  and  provides  security  to  CLINTON'S 
inner  office.  CLINTON'S  office  is  a Sensitive  Compartmented 
information  Facility  (SCIF)  and  Post  l is  located  within  that  SCIF.  By 
DS  security  policy,  no  cell  phones  are  allowed  inside  the  SCIF  and  DS 
agents,  officers,  and  staff  are  required  to  leave  their  cell  phones 
outside  the  door  in  secure  lockers.  CLINTON  refused  to  abide  to  this 
security  requirement  and  brought  her  cell  phone,  believed  to  be  a 
Blackberry,  inside  the  SCIF  where  a DS  agent  assigned  to  Post  1 was 
required  to  guard  it.  DS  agents  were  indignant  that  they  were  required 
to  follow  security  policy  but  CLINTON  made  herself  exempt  from  the 
same  regulations. 
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fedefUl  bureau  of  investigation 


Date  of  transcription  2/1 1/2016 


(U//rOUO)  On  February  10,  201  of 


Federal  Bureau  of  Investigation  (FBI)  Special  Agentsl 


offices  of  Latham  & Watkins  LLP,  885  3’^'^  Ave,  New  York  City,  NY.  Also  present  were! 


DOJ 


and 


was  interviewed  by 
at  the  Ijiw 
and 


and  the  purpose  of  the  interview, 


of  Latham  & Watkins.  After  being  advised  of  the  identities  of  the  interviewing  agents 


provided  the  following  information; 


fU//FOUOJ  is  currently  a] 

and  a|  at 

He  was  formerly  th 

|at  the  Department  of  Defense  6DoD)  from] 

Prior  to  the  DoDJ  Ivas  at  the 

National  Security  Council' (NSCl  from!  until 

Ifrom 

to  the  Fall  ofl  II 

from  until  early 

and  then 

(U//Fe«e) 


provided  that  there  were  typically  three  to  five  Deputy  Committee  (DC) 


meetings  a week,  up  to  four  Principal  Committee  (PC)  meetings  a week,  and  NSC  meetings  with  the 
President  as  needed.  Additionally,  there  was  a weekly  lunch  between  Secretary  GATES.  National 


provided  that 


Security  Advisory  DONILON  and  Secretary  CLINTON 
the  DoS  representative  for  DC  meetings  and  Secretary  CLINTON  was  the  DoS  representative  for  PC  and 
NSC  meetings. 


(U//re«e)  While  at  the  NSC 


I was  responsible  for  working  with  the  meeting 

participants,  to  include  the  Department  of  State  (DoS),  to  coordinate  and  plan  for  each  upcoming  meeting. 
More  specifically,  ]would  review  memorandums,  prepare  meeting  packages  and  control  the  flow 

of  information  between  the  agencies.  These  interactions  occurred  through  both  formal  and  informal 
channels] (provided  that  with  respect  to  DoS  matters  he  primarily  worked  with  JAKE 


SULLIVAN  and  JOE  MACMANUS. 
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(U//FOUO)  Prior  to  each  DC  and  PC  meeting  the  NSC  would  notify  the  participants  of  the 
upcoming  meeting  and  ask  that  they  submit  their  meeting  packages  in  advance  so  that  they  could  be 

distributed  as  read  ahead  material. stated  that  he  routinely  worked  with  SULLIVAN  to  ensure 

that  DoS'  agendas,  talking  points,  and  formal  documents  were  received  in  advance  of  each  meeting. 

noted  that  he  would  sometime  provide  relevant  documents,  such  as  ODNLassessments,  to  DoS 


b6 

b7C 


Investigation  on  2/ 1 0/20 1 6 at 

File  # J I302.-  ^5 

r 

By  SA 


New  York,  NY 


Date  dictated 


N/A 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI  It  is  the  property'  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency. 


b3 

b7E 


b6 

bVC 


FD-302a{Rev.  10-6-95) 


Continuation  of  FD-302  of 


Interview  or 


On  2/10/2016.  Page 


for  their  use  as  they  prepared  their  meeting  packagesj stated  that  the  classification  level  of  the 

packages  was  dependent  on  the  content  and  could  be  unclassified,  classified  or  a mix.  Documents  and 
meeting  packages  were  typically  transmitted  between  agencies  via  the  appropriate  email  system,  secure 
fax  (i  .e. , W ashfax)  or  couri  er  servi  ce. 

(U//FOUO)  Following  each  meeting  an  NSC  staffer  would  take  notes  and  then  prepare  a 
Summary  of  Conclusions  (SOC)  that  summarized  the  issue  discussed,  supporting  and  dissenting  opinions, 
the  final  outcome  arid  any  necessary  action  items.  The  SOC  would  then  be  approved  by  the  NSC 
executive  staff  before  being  distributed  to  the  meeting  participants. 

(U//FOUO) was  not  aware  of  how  or  where  the  NSC  archived  the  SOC  and  related 

documents  for  a specific  DC  of  PC  meeting.  ■ 

(U//FOUO) was  shown  several  emails  that  were  sent  in  preparation  for  an  October  2009 

PC  meeting  regarding  the  U.S.  strategy  in  Pakistan.  However,  after  reviewing  the  emails!  stated 

that  while  he  remembered  the  topic  in  general  he  could  nofrecall  the  specific  PC  meeting  in  question.  He 
noted  that  at  that  time  there  were  numerous  meeting  on  the  subject  Similarly  j :ould  not  recall 

the  details  of  any  of  the  documents  referenced  in  the  emails.  While|  [could  not  comment  on  the 

specifics  of  the  emails  he  did  note  that  the  emails  were  representative  of  the  communications  that  .were 
exchanged  between  NSC  and  DoS  as  they  were  preparing  for  a PC  meeting. 


(UZ/FODOj 
meeting.  However! 


the  limited  content  of  the  email. 


was  shown  an  email  that  was  sent  in  preparation  for  a .Tune  2011  PC 
could  not  recall  any  specifics  regarding  the  PC  meeting  in  question  given 


(U//FOUO)  A copy  of  the  original  interview  notes  and  the  referenced  emails  are  attached  in  a 1 A 
envelope. 


KD-302a(Rev.  10-6-95) 


nmoromi 


FEDERAL  BUREAU  OF  INVESTIGATION 


ALL  FBI  INFOR^iATIGIT  .COHTAIIIEJD 

HEREIN  IS  UNCLASSIFIEC 
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(U//PO«e)  On  1 0/23/2015  Special  Agent  (SAl 

Jn^ifiStigption  fFBn.  DOrI  ^ SSAN 

and  SA  in  FBI  Headquarters.  . 

interviewing  Agents  and  the  nature  of  the  interview] 


Federal  Bureau  of 
]was  interviewed  in  person  by  SA| 
ifter  being  advised  of  the  identity  of  the 

provided  the  following  information: 


UJ//FOUO)l  began  working  for  Department  of  State’s  (DoS)  Diplomatic  Security 

Service  tPSSt  in where  he  was  assigned  to  the  DSS  Los  Angeles  Field  Office.  Ini 

jvas  selected  for  an  assignment  with  the  Secretary  of  State’s  security  detail 

served  on  the  Secretary’s  detail  until  when  he  joined  the  FBI  as  an  SA  and  attended  FBI 

new  agent  training. 

(U//TOUQ)  When began  his  stint  on  the  Secretary’s  detail  CONDOLEEZZA 

RICE,  was  the  Secretary  of  State. detail  assignment  carried  over  to  HILLARY 

CLINTON,  when  she  was  appointed  Secretary  of  State  in  2009. 

(U//EOUO)  DSS  covered  the  majority  of  CLINTON’S  protection  while  she  was  in  the 
Washington,  DC,  area.  However,  when  her  husband  was  in  town.  United  States  Secret  Service  (USSS) 
would  cover  the  bulk  of  the  protection  detail  responsibilities  when  she  was  with  her  husband  or  in  the 
residence. 

(U//FOUO)  USSS  would  provide  security  for  CLINTON’S  3067  Whitehaven  Street  NW, 

Washington,  DC,  address  during  the  day  and  DSS  would  cover  the  overnight  detail. was 

never  inside  the  CLINTON’S  Whitehaven  residence,  as  DSS  usually  posted  in  a vehicle  outside. 

CLINTON  had  a secure  telephone  in  her  Whitehaven  residence  and] assumed  it  was  in  a 

secure  room. 


(U//FOUO)  CLINTON  usually  traveled  to  her  home  in  Chappaqua,  NY,  via  a US  Airways  shuttle 
from  Reagan  National  Airport  (DCA)  to  Westchester  County  Airport  in  White  Plains,  NY.  USSS  would 
handle  CLINTON’S  security  in  NY.  and  DSS  would  have  a small  presence  to  maintain  CLlN3^0N’s 
communications.  was  never  inside  CLINTON’S  Chappaqua  residence, 

was  known  as  the  CLINTON’S  Chappaqua  “house  guy/scheduler.”  The  security  detail  would  often 
contact to  determine  the  Secretary’s  departure  time. 


Investigation  on  10/26/2Q15 


Washington.  DC 


Date  dictated  N/A 


ITiis  docujncnt  contains  neither  recommendations  nor  conc^usio^s  of  the  FBI.  It  is  the  properly  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency,  ^ 
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(U//FOU0)  The  Secretary’s  security  detail  chain  of  command  was  as  follows: 


1 Special  Agent  in  Charge  (SAC) 

4 Assistant  Special  Agents  in  Charge  (ASAC) 

3 Shift  Leads  (SSA) 

Approximately  45  SA's  assigned  directly  to  detail  shifts 


jimm 


was  the  SAC  during  CLINTON’S  tenure  as  Secretary 


were  two  ASAC’s  during  the  same  time  period 


agents  assigned  with[ 
all  still  employed  with  DSS  (possibly  in  the  Washington  Field  Office). 


1 

to 

anu  DULOj 
CLIN'I'ON’s  d 

1 1 

ietaik 

lanui 

i andl 

Ewcresniii 

tre 


(Lf//fOU©)  CLINTON’S  office  was  located  on  the  7^^  floor  of  DoS  Headquarters,  The  entire 
Secretary’s  suite  was  a Sensitive  Compartmented  Information  Facility  (SCIF),  3 he  DSS  security 
detachment  maintained  a Post  directly  outside  the  Secretary’s  office.  The  DSS  space  was  known  as  Post 
One  (1),  DSS  personnel  were  not  authorized  to  bring  their  mobile  phones  into  Post  1,  it  was  located 
within  the  SCIF.  CLINTON  did  keep  a mobile  phone  inside  a desk  drawer  inside  Post  1 , but  when  she 
would  remove  the  phone  from  the  desk,  she  would  take  it  to  a non-SCIF  space  to  make  calls  or  use  the 
phone. 


b6 

b7C 


hS 

bVC 


(U//F©t?©)  HUMA  ABEDIN  and  CHERYL  MILLS  were  among  CLINTON’S  staff  members 


who  had  offices  located  within  The  7 


th 


flo^r  Secretary’s  SCIF,  In  addition  to  ABEDIN  and  MILLS, 
and  JAKE  SULLIVAN,  were  part  of  CLINTON’S  main 


b6 

b7G 


Traveling  crew,”  MILLS  did  not  accompany  CLINJ'ON  on  many  overseas  trips. 


(U//fOUO) 


could  not  recall  the  specifics  surrounding  the  electronic  devices  used  by 


CLINTON’S  executive  staff,  but  he  assumed  they  were  BlackBerry  devices 


did  not  interact 


with  CLINTON  nor  MILLS  via  emaik  but  sometimes  he  would  receive  a forwarded  email  with  their 


accounts  listed  in  the  chain. 

CIintonfoundation.org  accounts 
originating  from  a Gmail  account,  however,  he  was  not  entirely  sure. 


remembered  receiving  email  chains  that  contained 
also  thought  he  recalled  seeing  emails  from] 


hs 

hlC 


(U//FOU0j  In  addition  to  the  Secretary’s  DSS  security  detail,  CLINTON  also  traveled  with  a 
team  of  Security  Engineers  who  were  specifically  assigned  to  her  staff.  These  Security  Engineers  would 
travel  overseas  with  CLINTON  for  the  specific  purpose  of  setting  up  and  maintaining  her 
Communications  while  on  travel.  The  Security  Engineer  feam  generally  set  up  a secure  communication 
post  inside  the  Embassy,  or  a hotel  room  adjacent  to  where  the  Secretary  would  stay,  'fhe  communication 
post  would  be  manned  24  hours  a day. 


nv/NOFcrtm 
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b6 

b7G 


(S//Hf)  The  team  of  Security  En 
Secretary’s  communications  via  diolom 

bl  I 

igineers  would  send  the  necessarv  eauioment  to  set  up  the 

atic  pouches 

r 1 

\s  it  relates  to  the 

Secretary  s use  ot  Diplomatic  Rouches,] 

j was  unaware  ot  the  process  and  procedures  related 

to  the  preparation  and  transport  for  overseas  travel. 


b6 
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(U//FOUO)  When  traveling  overseas  in  advance  of,  or  with,  the  Secretary,  the  Regional  Security 
Officer  (RSO)  would  usually  provide  CLINTON'S  security  detail  a letter,  prior  to,  or  on  arrivah  3’he  letter 
provided  guidance  on  what  to  expect  from  a security  standpoint  while  in  a particular  country. 

Iwas  not  sure  if  a similar  letter  from  the  RSO  was  provided  to  the  Secretary  and/or  her 
executive  staff 


(U//FOUO)  Ifre  Secretary's  security  detail  would  “hotwash”  after  an  overseas  trip,  to  compare  the 
advance  team’s  preparation  to  what  actually  took  place  during  the  Secretary’s  travel.  The  RSO  was  not  a 
part  of  these  after  action  discussions. believed  an  RSO  would  send  a cable  to  the  RSO 


assigned  to  the  Executive  Office  at  DoS  Headquarters  if  there  were  any  security  issues  concerning 
CLINTON  and/or  her  staff 


hS 

bVC 


(U//POUQ)  Agent  notes  are  maintained  in  a 1 A envelope. 
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ALL  FBI  ItTFOR^^iATIOIT  LONTAIIIED 

HERZIN  IS  triTCLASSiriEC 

CATZ  lGl-13-2016  BY  J373S5T94  N3ICG 


FEBERAt  BUREAU  OF  1N\T5S  HGATJON 


Date  of  trajiscription  08/26/2015 


United  States  Depaitmgnt  of  State  (STATE).  515  22^^  Street  NW.  Washmi>ton. 


D.a  20037 
date  of  biTtlj 


office  telephone  (202X 


mobile  telephone  (202 


emai 


was  intervievyed  on  his  mobile  telephone  by  FBI  Special  Agent! 


aie.s^oN'. 


After  being  adv  i sed  of  the  identity  of  the  interviewing  Agent  and  the  nature  of  the  interview. 


provided  the  following  information: 


fa6 

b7C 


The  Information  Programs  and  Services  (IPS),  Bureau  of  Administration  oversaw  the  program  for 
Congressional  inquiries  and  Freedom  of  Information  Act  (FOIA)  requests.  I'he  House  Select  Committee 
on  Benghazi  requested  emails  to  or  from  former  Secretary  of  State  Hillary  CLfNTON  related  to  Benghazi. 
It  was  determined  there  were  296  emails  related  to  tlie  Benghazi  request.  After  IPS  officials  performed 
their  review  of  the  296  emails,  they  referred  emails  for  classification  determination  to  four  outside 
agencies,  specifically  fhe:  1)  FBI;  2)  CIA;  3)  Department  of  Defense  (DoD);  and  4)  National  Securift^ 
Council  (NSC). 


IPS  officials  have  regular  points  of  contact  (POCs)  at  all  agencies  and  STATE  bureaus  that  the 
IPS  would  send  cla.ssifi cation  determination  referrals  to  in  response  to  Congres.sional  or  FOIA  requests. 


-FBI: 

-CIA; 


1 " 

-ncj  contact  information  nrovided. 

-no  contact  infonnalion  nrovided; 

IPSteam,! 

- DoDi 
provided. 


boss  was 


[the  CIA’s  FOIA  branch  similar  to  STATEN 


email  wad 


hhiiciamov. 


Offi  ce  of  the  Secretary  of  Defense  (OSD)— no  contact  information 


retired  now,  hut  was  the  POC  earlier  in 


was  processed.  NSC's  cuiTent  POC  wa< 


helievcd 


Ltplephone  20: 


ght  iitfomr 

Legislative  .Affairs,  if  contacted  by  the  FBI. 


Llele 

Jmi 


he  Benghazi  request 
email 

I 

and 


Before  IPS  conducted  their  review  of  tire  Bengha^^i  requestJ 


Attorney^  Office  of  the  Lej^al  Adviser  performed  tlieir  own,  independent  review  of  the  296  Benghazi^ 


related  emails, 
a classification  determination. 


review  team  used  different  POCs  at  other  agencies  to  review^  the  296  emails  for 


did  not  kiiotv  why:  Ij 


team  did  a re  view,  as  that was 


b6 

b7C 


hS 

bVC 


IiivcstigatSoTi  OH  08/26/2Q1 5 fit  WiLshingtorL  DC 


Date  dictated  N/A 


By 


This  documem  coiiiains  neither  rcconimendaliorts  nor  eon  elusions  ofihe  FBI,  It  is  the  property  ofthe  FBI  and  is  leaned  to  your  igenoy;  it 
and  its  conienLi  are  not  to  be  distributed  ouLside  your  agency. 


b3 

b7E 


b6 
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orFD"30^ 

IPS'  purview;  2)  why 

team  used  c 

liffemut  POfN  than  the  regniar  POCs  IPS  used;  SJ  what 

review'  criteria  amPor  parameters 

teasn  used  during  their  review';  and  4)  why  team 

reviewed  and  produced  tire  296  emails  to  the  l lotise  Ccrmmitiee  prior  to  IPS  conducting  tltelr  formal 

b6 

bVC 


b6 

bVC 


rcvjew. 


Jtesm  used  reviewers  from  fhe  following  ag^ericieg:  1)  DepaitmeDt  of  Justice  (DOT);  2} 

team's  POCs  vvere  ha  foOcws; 


CiA;  3)  DoD:  and  4^  Ho\Be  Counsel  ('WPICJ. 
- l>OJ 


-ielepdoae  202 


- fJIA:  When  asked  direeth'  who  the  CfA  reviewer  was. 


and  her  mam  stated  they  did 


cKJrdinate  throurth  the  CLA  but,  to  date,  had  not  given  a name  lor  who  their  CiA  reviewer  was. 


-DoDJ 


teleohoiie  70j 


tn 

^ email 


Smailmi].. 

1 L 

- WliC: 

^;eid*pharie  2(tl 

email 

idhvho,coD.g: 

Jdid  not  know  whv 


the  WfiC  instead  of  the  NSC, 
the  wronn  POCs.  1 


instead  of  the  NSC. 


ktated  tlmt 


team  used  & POC  at  the  DCJ  instead  of  the  iddi  ;tnd  a FOC  at 
^nt  to  provide  iris  thougids  on  why  he  thought  they  used 
.earn  made  a "'rookie  rnkstake”  whejj  they  used  the  WilC 


b6 

b7C 


b6 

faVC 


sununed  up  tire  issue  witlt  the  different  POGs  as 
reteried  ti^e  296  eniasLs  to  the  NSt J.,  FBL  CJJA  and  Dold  wirereasj 
to  the  W. 
team  ;inf ! 


histtating  and  again  pointed  o'ot  that  IPS 
team  referred  the  296  emails 


K2  DOJ,  (hA  and  DoD,  and  none  of  the  referents  were  known  to  be  the  same  between  WS'' 
team. 


fa6 
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^LL  IBl  IHEDBilATiar  CCNTAItTEC 

HEREIN  IS  miCLASSIFIEE 

DATE  10-13-2GI15  BY  J37JS5T54  H3IC 
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¥M}EUAL  BUREAU  OF  INVESTIGATION 


D.C.  20037,  Qj^ce  telephone  (202)[ 
date  of  birt'h. 


etnai. 


kt;5tate.gi:>v. 


mobile  telephone  (202^| 

was  iBiendewed  in  p^;,rson  by  FBI  Ageiits 

,at  FBI  Headquarters,  935  Pemisylvania  Avenue  Kordtwest,  Wasliington,  D,C.  20535.  .i^ter 

being  advi.serl  of  tite  identities  of  the  Interviewing  Agents  ai^d  tiie  rtatm'e  of  the  interviewj  [provided 


the  foHo\viiu>  inidnnanon: 


tor  Margai'st  "'Peggy“  GR^AFELI),  I>cputy  Assistant  Secretmy,  who  tvas  responsible  for 
overseemg  400-500  employees  who  work  ors  matters  related  to  the  F'loedoni  of  In  formation  .Act  (FOLA), 
the  Privacy  Aci,  tind  informaiiori  rnanageuient  tor  S'fATE.  .A,A3IS  was  tire  office  dial  provided  guidance, 
usually  tlirough  inemorandtstus,  tlrat  ovensaw  records  compliance  for  all  STA  TIC  emp{oyee.s.  A/GIS  also 
oversaw  the  coordination,  production  and  maintenance  of  Sl'ATFfs  Foreiun  Affairs  Afanuat  (FAMT 
though  A/CiilS  was  not  msoonsible  for  the  FA.K''rs  content 


Joyce  BAllR,  Assistant  Secretary,  Bureau  ot  Admiriiatraiion,  was 
GRAFELDT  boss  and  immediately  aulxjrdiuatc  to  Under  Seeretary  for  A'latiagenieid  Patrick  KENN13DA2 


|n  or  .around  .August  20 1 4, 


in  tcgi.s!ative  Aiiairs  to  work  revdew  and  nroduedon  matters  related  to  inmiine.s  from  the  Hoirse 


Select  Cunirarittes  on  Bensha^d, 


state's  J„.egislative  Affairs.  It  wew  around  dmt  tiine  that 


learn  about  records production  and  the  FO,IA  process.  Around  the  same  time. 


telephone  call  from 


ATtornev.  Offi  ce  of  the  Legal  Adviser,  who  asked: 


any  FT JNJ'GN -related  ernaiis  in  the 


request. 


tenswere 


-p.st  tile  tliat 


started  to 


-ccA-iyd 


f tfiere  were 


tliat  there  were  GLINT  ON -related  emails  it!  thd 


pad  from  a t>re\dnris  E'OLA 
,usl  .tile. 


I'be  Itifbrmation  Programs  and  Sendees  (IPS)*  Bureau  of  AdmimsU'ation  oversaw-  the  FOIA. 
program.  In  or  around  Noveniber  or  December  201 4,  in  respou.se  to  a F01,A  request,  IPS  offioisis  wem 
notiti  ed  they  would  pick-up  14  banker  boxes  of  emails  at  fonner  Secretary  of  State  I lillary-  CTJNTONN 
office  related  to  GLTN'FON'.s  trse  of  personal  email  to  conduct  officiai  STAJdd  business.  Later  J 


fa6 

b7C 


Started  working  at  STATE  i.i] 

[and  siuerj 

wa.s  the 

b6 

b7C 


fa6 

b7C 


b6 

b7C 


ill  verst  i.gati'ia  On tillilh'Ttr!  5 iC 


a;)d  iu  C0!i;C!its  litc  tsot  io  bi:  iiistn'biJtc.tS  ixiwi de.y ot-r  agency. 


b3 
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to  nick-uo  only  Y>  boxes  at  Williams  & Cormoily,  LLP.  On  or  aroniHi  December  4,  2014, 


]picked~ap  1 2 boxes  at  Williams  & Connolly, 


mid  IX'S  b6 

officisis  \\ere  uiisnre  what  happened  to  the  other  two  boxes,  'Lhe  items  in  the  boxes  were  stackexi  with  nn 
ibiders  or  known  method  of  ornyiuxation. 


ploba!  Publishina  Solutioits,  svbo  used  ciassilied  copiers  and  made  two-sided 

, a copy  for  offieiais  in  SIXTH  Executive 


copies  of  ail  recei  ved  niaterials  Ibr^ 

Secreumat  (S/£S),  and  a couxde  of  copies  for  IPS  officials  to  use  for  tiielr  HOI  A review,  Tite  original 
emails  w'ere  sliriiik- wrapped  atid  placed  in  a sensitive  compartmented  information  facility  in  Newdogton. 
Virginia, 


InMa-rdilOlS 


first  beard  of  issues  wdth  the  CLINTON -related  FOfA,  process. 


Legislative  A.ffairs  .arid  Office  of  the  Leaal  .Adviser. 


stated 


hiid 


_Jw< 


would  know 


wily  and  how  those  2516  specilic  emails  were  picked  and  why  and  how  they  conducted  their  own  review, 
separate  from  any  review  the  IPS  unit  conduoted.  Previously,  IPS  liad  alway.s  been  in  charge  of 


Cioxigressionai  document  production; 
Lcgai  Adtdser  w'ould  normally  onlv  wei 
conduct  the  review  arid  production. 


Ktated  attorneys  from  Lemsiativc  Affairs  and  Office  of  the 


the  material  with  Sl'ATE  bm'&aus  and  other  anenctes.  After  their  owm  levicvv  vwts  anished 


produced  the  requested  material  for  tiie  Iiou.se.  CoinmiSee,  piior  and  independent  to  the  IPS 


uviitN  fonnai  mview* 


btnted  those  involved  at  IPS  felt  the  7 ’*  tlooij  or  leading  S I'A'l'E  officiuls,  had  their  own 


fa6 

b7C 


[the  JT)f  A program.  The  notmal  FOlA  procest;  would  bs  where  IPS 
received  a FOI A request,  then  IPS  fonvarrlcd  that  request  on  STAT  E forms  via  email  to  die  I'jerson  who 
the  FOIA  request  pertained  to,  "fhe  peminant  party  would  then  fill  out  the  fbmi  and  provide  the  IPS  office 
the  reqiiested  ite.ms,  which  the  IPS  office  then  reviewed  prior  to  a release  of  the  inibrmation  back  to  the 
initial  requestor.  In  the  CLIKTON-reiated  FOI.A  case,  IPS  received  tm  ttnpmcedcntcd  amoual  of  emails 
in  hard  copy  fomu  a.s  tiierc  were  52,455  work-related  pages  to  review.  In  a letter  hand-delivered  to 
KENNLiDY  by  Cllieryi  MILLS,  or  MILLS"  attorney,  it  tvas  stated,  "'in  an  abtutdance  of  caution,  ffiey 
overproduced."" 

Separate  from  the  CLiNTON-roiated  HOI  A request,  there  was  a Congressional  request  lor 
CI,IN'rON'-rclated  emiul.s  related  to  the  Benghttxi  incident  from  the  House  Select  Committee  on 
Benghfm.  A review  wa.s  conducted  of  296  emaikp  nrohablv  bv  persons  who  worked  in  t[ig  Bureau  of 


b6 

b7C 


b6 

b7C 


in  on  the  legality  and  scope  of  leipiests,  but  IPS  would  actually 
land]  plated  they  c.oo.rdinated  the  proper  review  of 

and 


idetis  on  how  to  fonnally  review  the  296  emails.  KENNBDYN  initial  idea  for  how  to  review  tIte  296 
email  was  as  followts;  1 ) tite  IPS  officials  conduct  a review;  2)  IPS  officials  referred  items  to  otiicr  STAT'E 
buroau.s  and  inter-agency  petnuers  for  tireir  review;  3)  IPS  ofHcials  received  the  rfifema.1  dfiteTmiirations 
.arH  submitted  to  the  Hou.se  Lomurittee.  T'he  review  process  that  was  finally  deckled  upon  was  as 
foliaw.s:  I)  the  IPS  officials  conduct  a review;  2)  IPS  officials  reieired  itejns  to  other  STATE  bureana  artd 
inter-agency  partners  for  their  reviewq  3)  IPS  officials  nxanved  the  refenwl  detomiinatioi^s  and  submitted 


b6 
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of 


pjSLe 


to  the  Oi!kx  of  the  l.egaS  Adviser;  4)  after  th&  Office  of  the  Legal  Advisors  review,  llien  it  would  be 
submitted  to  tiie  Idouse  (ilonunittee. 
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hi  mid-March  2015>  tFS  officials  conducted  their  fonnal  re^dew  of  the  296  emails  ou  theh 
classified  iieiwork,  aka  ''{A.-ASSHETA  using  their  Frce<ioms  System,  aka  ”l'2d'  IPS  felt  inxmetise. 
pressure  to  complete  the  review  quickly  and  to  not  label  anything  as  ciasslfisd.  In  IPS’  initial  review, 
tlicoHlki  not  use  a B{1)  exemption  on  any  of  the  smaiis,  'The  B{l)  exemption  was  used  to  excitide  the 
public  release  of  classffied  infornr).ation  or  matters  related  to  mttiona!  security,  IPS  officials  svere  told 
tliere  was  nothing  classified  in  tlie  296  emails^  so  they  shouldn't  Use  the  B(l)  exemption. 


thought  there  were  four  or 


flow'ever,  from  the  formal  revdevvofthe  296  emails,  in  total, 

five  STATE  btucsus,  stieh  as  African  Affai,rs  Bureau  and  ffie  Near  Bastern  Afeirs  (NILA)  Bumau,  and 
five  aon-STAI'B  agencies,  s|>ecificaliy  the  FBI,  CI  A,  DeparUneni  of  Defense,  National  Security  Council 
and  While  Douse  Counsel  that  were  sent  referrals  (items/emahs)  to  conduct  their  owm  formal 
classification  reviews  dhie  NBA  responded  that  in  the  material  they  received  there  w'ere  four  or  live  B(  1 ) 

redactions  that  needed  to  be  juade.  After  lie  heard  tins, was  frustrated  tuid  asked  IPS  officials  if 

they  were  '‘■going  to  challenge  the  desk  officer  from  Maglnwh"  by  using  the  B(l)  exemption. 
isked,  “Who  gt  NEA  oooraded  it?  WeTi  need  to  explain  oiassfficiUion  to  theae  nciinlef 


multiple  limsa 


experience  wath  document  prod 


already  coordinated  with  other  agencies  and 


uctionf' 


stated 


nas  previous 


Stated  ‘\NI:A  will  change  ihei,r  B(l}s  to  B(S)s  because 


they  (NBA)  didn’t  understand  bow'  to  classify  Items.’'’  A 15(5)  exemption  v/as  not  used  for  classified  data. 
hut  rather  for  privileged  communications,  such  as  executive-  or  altomey-rehned  privileges.  or 

ai.so  stated,  ''it’s  not  cla,ssifiad  until  sve  uograile  it.” 


The  review  officials  that 


anu 


used  for  the  review  of  tfie  296  emails  were  nci  the 


same  no.rmal  review  officials  that  the  IPS  team  use  on  a regular  basis.  For  exarnple,] 

but  instead 
and 


did  not  use  the  IFS’  normal  point  of  contact  for  the  FBl| 
the  Department  of  Justice  to  cotmt  as  the  FBI  reviewer.  The  namefl 


auq 


used  someone  from 
I stated  they  used 


anti 


used. 


reviews  with  at  tire  CIA, 


upon  being  risked  directly,  would  not  give  a name  of  who  thev  coordinated 


Tiuoughout  the  process. 


ftaied  If  an  einail.dtem  should  have  a B(i)  exemption,  tfien. 


PS  would  use  a B(l)  exemption.  Despite  that,  at  the  end  of  the  referral  process,  IPS  was  told  to  run 


bverything  bv  Legislative  ..Affairs  and 


IPS  officials  felt  intimidated  when  th&v  used  or  si.sggested 


the  use  of  (he  Bt  It  exemntipn  on  any  of  the  296  emails.  In  addition  toj 
and: 


hnd 


k,en:nedy 


were  named  as  some  of  the  STATE  officials  who  pressured  IPS  employees  to 


not  label  anvihing  as  classifted. 
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for  White  FlcU'Se  Counsel  arid  the  Depaitmeat  of  Defease  were  also  not  the  regular  reviewers  the  IPS  team 
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In  late  April  201,6,  IPS  officials  completed  the  formal  review'  of  the  Benglraxi- related 
Congre-ssional  inepifty.  All  materials  were  .ready  for  relea,se  at  that  time.  The  CIA  provided  redactions, 


rf>-302  t^f 


o?iOi^;9aai5,  4 


bat  nosite  were  deemed  a B(l)  exemption.  Most  of  the  items  with  CIA  redactions  woic  emails  ftoin 
Sidney  BLUMJ-iNTIIAL,  Otie  item  was  deemed  classified  acoordina  to  tlio  i^'BI  find  KENNEDY  held  e 
closed  door  meeting  attended  by  tl'iC  FBI\^  [and  IPS’ 

KENNEDY  a3ked[ 


among  others.  In  that  meeting, 


to  change  the  FBEs  B(l)  upgrade  ciasslficadoa  but 


did  not  change 

the  FBEs  stance.  On  May  22,  It  was  decided  by  die  IPS  team  tliey  v^ould  keep  the  itpgiade  of  the  one 
FBI-related  email  and  the  IPS  ofllcials  sent  David  KENBAtl,,  Attorney,  Williams  Connolly,  LLCI,  a 
letter  infonnina  him  of  the  results. 
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There  was  a powerful  group  of  very-'  Idgh-ranking  STATE  oOiciaN  that  some  refeired  to  ao  “The 
7'^  Floor  (jroup”  or  “The  Sliadow  Government.”  d'his  gi-otip  met  every'  Wednesday  aBemoon  to  discuss 
the  FOIA  process.  Congressional  records,  ami  evciTtlring  CLINTON -related  to  fOLA^Congressional 
inqiiiries.  llie  known  regular  attendees  included  Jonatiian  FINISIC  Chief  of  Statf  tor  Secretary  of  State 
John  KEKRY,  Jcnmfcr  STOUT,  Deputy  Chief  of  Staff,  Flealher  HIOGENBOTTOM,  Deputy  Secrctaty'^  of 


Affairs 

Office  of  tliie  f^enal  Adviser  overseeing  STATlrfsl 


Office  of  the  T.xwM  Ai 

iviser. 

i 

1 

md 

Nonnail  V s with  larger  FOlA.  nsrpsests,  such  as  witli  the  <2  LIN  TON -related  FDIA  request,  IPS 

would  sobednlc  a rolling  rakwsc ditat  meant  every  few  weeks  or  ntontn,  the  pro^xtrly  reviewed  and 

approved  material  wotrld  be  made  pubiic.  However, j | and  The  7^'  Floor  Group  as-gued 

tire  release  should  be  done  all  at  once  in  Janiumy  2016,  for  coordination  purposes.  While  IPS  ofittials  did 
not  have  controi  of  the  release  proce^  of  the  296  emails  related  to  the  rdou'Se  Seleet  CommiUeo  o,n 
Benghazi^  request,  tliey  did  have  control  for  the  release  process  for  the  approximately  30,000  emails,  or 
52,455  pages  related  to  the  CLINTON  FOIA  reqtiest,  and  it  was  decided  to  l>e  a rolling  release. 

On  July  15, 2015,  IPS  on-boarded  Intelligence  Community  Inspector  General  (ICIG)  revievs^r,s  to 
help  with  tile  overvvhelnung  review  process.  The  ICIG  reviewers  were  trained  up  mid  had  been  integrated 
into  tlie  l^'OIA  review  process  to  help  ensujre  IPS  can  meet  t| 
redacted  emaile  bv  the  .lauuarv  15, 2016  deadline,  'fo  date, 
referrals  aireadv  sent  out  ihr  clasaiOcation  detennination. 


maiiijlated  release  of  ail  non-exempr/non- 
vvas  awam  of  approximately  305 


ptated  StES  are  the  Custodian  of  Records  for  all  Secretaries  of  State  and  Deputy 

As  such,  S/ES  received  all  taskers  from  the  IPS  team  related  to  FDIA  requests  ihat 


Secretaries  of  State, 

involve  Secretaries  of  State  or  Deputy  Secretaries  of  State,  S/ES  should  also  have  answers  regarding 
STATEN  procedures  that  dealt  wltb  iniormatlon  technology:,  includiTig  hardware  and  soBware  for  STATE 
employees'  emails  and  telenhoneg.  Joseph  MaCMANUS,  Exeernive  Secretary'  and  Antbsssador.  StES, 


and 


S/IiS.  or 


someone  in  the  S/’ES  Iitfonnation  Re.source  Management  (S/BS/IRM)  unit  shotild  know  specific  details 

ptated  S FATB  ser'v'ers  were  located  at  the  Enterjisrise 
would  be  knowledgeable  about 


about  CUN'TON^s  at-home  server  set-up. 

Server  Opemtions  Center  (ESOC)  and  ManagernentTRM  (M/: 
STAJTi  servers. 
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CbnEinuation  ol'r  D-302  of IX!M.Vk:aLoj  On._p8^9/2015_,  Pagi;  5 b7C 

High-ranking  STATE  officials,  described  as  some  Assistant  Secretaries  and  all  Under  Secretaries 
and  higher,  used  a separate  network  .tor  emails  and  record-keeping  called  the  Principal.  Officer  Electronic 
Management  System  (POEMS).  The  vast  majority  of  STATE  employees  were  not  on  POEMS. 

I stated  .he  heard  third-hand  the  National  Security  Agency  (NSA)  set-up  a computer  for 

CLINTON  and  the  FBI  should  talk  to  S.-'^S  about  the  specffics.  Additionally,  .FBI  should  ask  S/ES  about 
Jake  SULLIVAN'S  email  being  hacked,  as  maybe  that  had  something  to  do  Mth  CLINTONN  emails  or 
why  the  NSA  set-up  her  computer. 


nv:>02aa^^;v.  JO-6-951 


ALL  Il'TTDRliATIOIT  COITTAIl-IED 

HEREIN  IS  miCLASSIFIED 

□ATE  10-05-2015  BY  J37J85TS14  NSIC 


FEDERAL  BUREAU  OF  INVESTIGATION 


■>f  P i alte  River  Networks.  5700  WashiTuilon  Street.  Denver^ 


emai 


Cokrrado,  80216^  telephone  (303 )_ 
fhxicral  Bureau  of  Inv^estlgation  Special 
advised  of  the  identity  of  the  anents 


ki:::niattenvei.conv  was  contacted  in  oer^^on  bv 


identified  him^eif  ad 


Ahei 


\wm 


Phitic  River  Networks  mid 


Slated  that  he  had  contacted  the  companyhs  ie^al  counsel  about  the  scheduled  meeiinu  With  the  Fi3 


Julv  29.  2015,  Counsel 


advised 


on 


not  to  answ^er  questions  imm  the  FBI  without  counsel 


present. 

A 

provide 

a < 

[an< 

i t 

Si'f 

told 


K>  iniervdew  would  be  necessary;  however.  SA 


:a  document  with  instructions  ibr  Plauc  River  Networks, 
Jto  an  empty  conlbrence  rcx>m. 


heeded  to 


invited  both  SAs 


^ provided  a copy  of  a FBI  preservation  letter  r 

Kahle  )V,  Section  Chief,  Counterinteliigence  Division. 


:ated  July  27,  2015,  signed  by  CharSes  H. 

^ ^commented  comp^mv  ofilciaR  had 

svondered  how  long  it  would  take  for  iheni  to  be  contacted  about  tlie  named  account.  I Usked  for 

cipincation  about  the  preservation  SeUer  and  the  rcsponsibiiuies  of  their  company.  SA then  read 

to a portion  olThc  preservatioo  letter  and  explained  the  ¥Hl  was  not  asking  for  any  information 

at  this  time,  hut  that  the  letter  was  served  in  anticipatioT^  of  fiiture  legal  process,  fhe  letter  requested  that 
Platie  River  Networks  preserv^e  any  records  to  date  which  wure  identified  in  the  albren^etnioned 
preservation  letter.  Agents  also  explained  the  request  for  non  “disclosure. 


expre.ssed  his  concent  about  Platte  River  Networks  becoming  a target  if  tins  matter  ever 


became  public.  SM 


provided 


with  her  contact  tTiiormation  al  RBI  Denver. 


was  also  pro^dded  F'BI  Strategic  Partnership  C,^oordinator  {SFCJ)  brochures  that  have 
information  about  ("ounterinlelligence  seemily  awamness.  Agents  also  discussed  the  RBFa  InfVagard 
program. 
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hS 
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hS 
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t!nvni^5stivr!  i.>i\  


7 h!S^<lt?cumciu  not  of  iht^  mt.  ft  h ihii  f U]  to  youJ  iUiOfU'y;  U 

i?v3d  m cofstono:  i\rc  rsot  k'v  h<:  aiurlbxti^^a  os^tsuk  voJt.tr 
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ALL  IMFORl^ATIOH  GOtTTAIMED 

HEKEIN  IS  Ul^CLASSiriEC 

CATE  lO-OS-2015  3Y  J37JS5T54  MSICC 


FEDERAL  BtJREAU  OF  INVESTIGATION 


D.mo  t>niansi:ripUt3n  (?H.07.20j5 

On  August  6 , 2 015,  ICATHERINE  TURNER,  Partner  at  the  law 

offices  of  williams  Connolly  LLP,  725  12”^'  Street,  N,W.  Washington, 
U . C . met  at  her  place  of  employment  with  Agents  of  the  FBI  pursuant  to 
an  agreement  reached  by  correspondence  between  the  Department  of 

Justice  and  Williams  a Connolly,  This  agreement  (enclosed) , reached  on 
August  6 , 2 015 , provided  that  Williams  &.  Connolly  voluntarily  turn 
over  to  the  FBI  three  (3)  thumb  drives  containing  30,490  emails  from 

former  Secretary  of  State  Hillary  Clinton' s @clintonemail , com  account 
as  well  as  hard  copy  printouts  of  the  emails  and  a laptop  computer 

containing  a duplicate  electronic  copy . 

At  approximately  2 ; 30PM,  TURNER  met  Agents  at  the  loading  dock  of 
her  firm  and  transferred  22  legal  boxes  of  documents  to  the  FBI ' s 

possession  along  with  a laptop  computer  and  three  { 3 ) thumb  drives 

described  in  detail  below  and  on  the  enclosed  FD- 94 1 , Consent  to 
Search  Computers , and  FD- 597 , Receipt  for  Property . 

Item  1;  Lenovo  Thinkpad  T420,  S/N  PB-YC912  12/03 

Item  2 : Lexar  Micro  16GB  thumb  drive , black  and  silver  in  color, 

S/N  LTDTT16GB-000-1001DA  (original) 

Item  3 : Lexar  Micro  8GB  thumb  drive , green  and  'white  in  color, 

3/N  LTDTT8GB-000-117AU 

Item  4 : Kingston  SGB  thumb  drive,  silver  in  color,  S/N  DTSE9 

Item  5“27:  22  legal  boxes  containing  paper  copies  of  the  above 

described  30,490  email  communications 

TURNER  explained  that  the  original  thumb  drive,  Item  2,  was 

obtained  from  Platte  River  Networks  but  did  not  describe  how  it  was 
collected  or  under  what  circumstances,  TURNER  described  the  other  two 
thumb  drives  as  Identical  to  the  original  though  one  of  the  drives 
contained  two  complete  copies  of  the  email  set.  The  laptop  computer 
v/as  previously  used  by  the  firm  for  unrelated  matters  but  believed 


Invests. <2 £iu on  m 


VVaslihiS£U>n.  D.(L 


Bv  SA 


Date  N A 


rhU  document  conuun^  neither  rccnnnnctidahoris  uoi  of  the  PBl.  U the  pcopoiiy  of  the  PBt  huW  to  your  ttgcucy:  it 

aij  J iu  oomeuE^  iiiv.  noi  U>  be  Jfsinbutod  ouiskte  yov.r  agency, 
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to  have  been  cleaned  of  privi leged  material  prior  to  use  and  storage 
of  the  30,490  emails.  This  laptop  has  not  been  connected  to  the 
internet  since  being  loaded  with  an  electronic  copy  of  the  emails , The 
user  name  .for  the  laptop  is  " . \ internetonly"  and  the  password  is 
”■  InternetOnly  ! i"  . 

TURNER  explained  that  the  firm  maintains  six  (6)  additional 
laptop  computers , each  of  I'Jhich  contain  identical  digital  copies  of 
the  30,490  emails,  but  also  contain  attorney/client  privileged 
communications  and  as  such  are  not  being  turned  over  to  the.  FBI  at 
this  tiRie.  TURNER  advised  her  firm  is  in  negotiations  with  the 
Department  of  Justice  over  the  disposition  of  these  laptops. 

Prior  to  departing , TURNER  signed  the  enclosed  FD- 34 1 , Consent  to 
Search  Computers,  and  FD“597,  Receipt  for  Property.  The  original  'was 
kept  by  the  FBI  and  copies  were  made  by  TURNER  for  her  records. 

Subsequent  to  the  FBI's  collection  of  the  above.  Items  1-27  were 
transported  to  the  Washington  Field  Office  of  the  FBI  where  they  were 
entered  into  evidence , and  given  IB  numbers . Copies  of  the  intake 
sheets  and  FD-1004  are  enclosed  with  this  communication.  Items  I- 4 
were  then  transported  by  members  of  the  FBI's  Forensic  Analysis  Unit 
to  Q'uantico,  Virginia  for  storage  and  evaluation.  Items  5-27  are 
presently  stored  in  evidence  control  at  the  Washington  Field  Office, 
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Date  ^Jf  transcf  ipiba 


20.15 


iU/ffme)  On  December  18, , 

Executive  Secretariat  - Infonnation  Resource  Management  Mobile  Commanieations  tS/ES 


MC)f  at  the  U,S.  Depaitnient  of  Slate,  email  addres?^ 

was  interviewed  by  Federal  Bureau  of  Investigation  (FBI)  Special  Agents 


p^tate.gQv.  teiephone  203 


JEM 


Jad 


i|  s'  V --  - I I I 

^fter  being  advised  of  the  identities  of  the  interviewing  agents,  and  the  purpose  of  the  interview^ 
provided  the  following  infonnation: 


(U//Fefcr© 


ms  worked  at  the  Departnient  of  State  since]  ~la^d  has  held  a variety  of 


IT  related  positions  that  include  mobile  computings  network  engineering  and  develoning  the  State 
Messaging  and  Archive  Retrieval  Toolset  f SMARTS  system. 


(U/'WtrO)  fhe  MC  team  is  responsible  for  estabiishing  secure  mobile  voice  and  data 
communications  for  the  Secretary  of  State  (Secretaiy)  and  his  team  when  they  arc  traveling  domestieany 
and  mtemationally.  Prior  to  a trip  by  the  Secretary  and  his  team,  the  MC  teani  assembles  kits  of 
networking  equipment  at  their  lab  in  Springfield,  VA.  I'he  kits  include  networking  components  such  as 
switches^  routers,  encrypters,  laptops  and  VOIP  phones  and  are  customized  based  on  threat  stream 
information  provided  by  the  ioca.i  Regional  Security  Officer.  The  equipment  is  then  tested  to  ensure  that 
it  is  working  properly  and  that  it  hasn't  been  compromised  before  being  sealed  in  a diplomatic  pouch  and 
sent  to  the  li.S,  diplomatic  establishment  at  their  destination.  Upon  arriving  onsite,  the  team  collects  the 

pouch  and  checks  that  the  seals  haven't  been  tampered  with. >rovided  that  there  are  nine  kits 

of  networking  equipment  and  that  multiple  kits  are  deployed  when  the  Secretary  is  traveling  to  multiple 
locations  on  a single  trip. 


(CJMr) 


bl 




Fikii 


302  . Date  dic-lateO 

This  dfictmjent  conUiiRis  Jieither  nor  concltisiorts  of  the  FBJ,  U is  the  property'  of  the  FBi  and  i.s  loaned  to  h 

md  its  contents  arc  not  ttj  be  distribtJtt^  ootsitk  voor  agency. 
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bl 
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(U/ZH-jljOj  Itie  communkation  networks  established  by  the  MC  team  provide  the  Secretary  and 
hss  staff  with  secure  data  and  voice  connections^  so  that  they  can  connect  back  to  the  Department  of  State 
network  to  securely  conduct  official  business.  Although  the  networks  established  by  the  MC  team  create 
encry  pted  data  charmds.  users  arc  still  required  to  use  a fob  to  access  their  Depaitment  of  State  email 

noted  that  die  MC  teajB  continuousiy  monitors  the  network  encrypters  to  watch  for 


accounts. 


any  signs  of  an  intnision  or  other  compromise  of  the  system. 


(u//Feye)[ 


provided  that  the  Secretary  and  his  team  typicaiiy  do  not  use  the  SBU 


network  established  by  the  MC  team  for  persona!  matters.  He  noted  ttiat  they  are  free  to  use  the  standard 
intemet  service  in  their  own  room^  as  any  other  hotel  guest  would. 


iS/m 

When  classified  documents,  or  facsimiles^  are  sent  for  the  Secretary  to  review  they  arc  usually  delivered 
to  the  MC  team  by  the  local  U .S,  diplomatic  establishment  The  MC  team  then  reviews  the  classification 
markings  and  page  count  before  providing  the  document  to  the  recipient.  Once  the  review  is  complete  the 
MC  team  collects  the  documentj  counts  the  pages  and  then  enters  the  event  into  a log. 


(U//-H3UOj  If  m urgent  message  arrives  at  the  mobile  command  post  for  the  Secretary  or  his  team 
the  MC  team  will  alert  the  recipient  that  a message  has  arrived  and  that  the  recipient  should  return  to  the 
command  center.  Depending  on  the  Secretary's  location*  tins  might  m<^  sending  a message  to  one  of  his 

Line  Assistants  or  knocking  on  his  door  if  it  is  after  hours, stated  that  the  Secretary  does  not 

have  a secure  cell  phone  and  that  he  is  typically  notified  to  return  to  the  mobile  command  center  even 
though  there  are  usually  secure  eommunicatiojis  in  his  car. 


(UZ/FOt^f 


[stated  that  the  MC  team's  policies  and  procedures  arc  the  same  for 


domestic  travel  os  for  international  travel.  However,  in  the  case  of  domestic  travel  the  communication 
kits  are  sent  via  Diplomatic  Security  instead  of  via  the  local  U,S,  diplomatic  establishment. 
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(U//F0UO)  I hfi  MC  teaitt  is  typicaEiy  staffed  by  two  to  four  MC  team  members,  depending  on  the 
site,  AH  of  the  MC  team  members  hold  a TS/SCl  clearmcc  and  receive  extensive  training  on  the 
equipment  and  security  procedures  before  their  first  deployment,  'fhe  MC  team  members  from  various 
components  ■witlrin  the  Departnicnt  of  State  and  may  be  contractors.  Foreign  Service  members,  or  career 
civil  servants.  The  average  team  member  is  on  the  team  for  tw'o  or  three  years  before  moving  on  m 

another  ft-igionment  within  the  Department  of  State.  However,!  hoted  that 

Iras  been  on  the  MC  team  for  approxi  match  years, 

(U//FOUO) was  not  in  a position  to  comment  on  how  the  MC  policies  and  procedures 

had  changed  between  2009  and  today  but  he  noted  that  they  are  constantly  working  to  apply  faster  and 
lighter  teehnoiogie.s  that  will  achieve  Hteir  mission  of  providing  secure  and  reiiablc  communications. 

pad  no  conprns  with  the  MC  team’s  ability  to  meet  its  objectives  given  the  resources  that  it 

had.  He  provided  that] ^ [ or| 

may  be  able  to  provide  more  insight  on  how  the  MC  team  operated  between  2009  and 

‘lUTT. 


(C//FOflO)  A copy  of  the  original  interview  notes  arc  attached  in  a lA  enveiope. 
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Date  of  transcriptiori  6/2 1 /2(]  i 6 


(U//FOUO)  On  June  2 1 , 201 6 


DateofBirthI  I.  was  interviewed 


by  FpHerfll  Riireau  of  Investigation  (FBI)  Special  Afients| ^ . , 

residence,! IVA.  After  being  advised  of  the  identities  of  the  interviewing  agents. 


and 


at  his 


and  the  purpose  of  the  interview provided  the  following  information 


leaving  in 


(t  __  Iwnrked  at  the  I TS  Department  of  State  (DOS)  for  approximatel>|_^ears  before 

telecommunications  specialist  under  the  Executive  Secretariat 


noted  that  his  daily 


(S/ES)  at  DOS  during  HILLARY  CLINTON ’s  tenure  as  the  Secretary  of  State.!  ^ 

duties  remained  the  same  during  this  period  despite  several  reorganizations  which  moved  his  position  to 
different  departments.  He  was  responsible  for  supporting  the  installation  and  operation  of  secure 
communication  equipment  at  DOS.  This  included  secure  video,  secure  voice,  the  AVashfax,  as  well  as 


;ommum  canon  equipmcni  mi  a uiLium^u  viuw,  — , — 

egular  telephone  and  facsimile  equipment]  jwas  not  responsible  for  email  support,  which  was  the 

■ 1 ’ 1 ■■  j.  O T 4- 1 j-i  j-s  1 -1  « 4-1 


responsibility  of  S/ES  - Infq 
who  was  th 


ation  Resource  Management  (S/ES-IRM) 
js/ES-IRM  under  JOHN 


I 

TENT 


reported  to| 
EL. 


fU/Z-FOBO)!  jsupported  CLINTON’S  transition  to  DOS  and  was  responsible  for  establishing 
secure  communications  in  her  office,  vehicles  and  residences.  He  initially  conducted  a survey  at  each 
residence  to  identify  where  the  commercially  provided  telecom  service  entered  the  residence  (i.e.,  the 

" ^connected  a Tl 


■point  of  presence”)  and  to  assess  what  equipment  needed  to  be  installed.  Thereafter, 
nkcuit  and  ran  lines  to  the  locations  in  the  residences  .where  the  equipment  would  be  installed.  Although 
[installed  the  equipment  it  was  sometimes  maintained  by  other  departments  within  DOS.  For  example 
IRM,maintained  the  Defense  Red  Switch  telephones  (i.e.,  red  phones)  once  they  had  been  install^  by 
The  point  of  presence  in  the  Whitehaven  residence  was  in  the  basement  ant^ 

4 j1  jt."  Jn_ TT^  j-U  — 4 


ran  lines  from 


there  to  closet  in  the  third  floor  SCIF.  He  then  dropped  additional  lines  to  the  second  floor  office  area  so 
that  an  additional  STE  and  red  phone  could  be  installed.  Similarly,  the  point  of  presence  at  the  Chappaqua 
residence  was  also  in  the  basement  andj  jran  lines  to  a small  luggage  closet  and  then  to  the  final 
equipment  locations  within  the  residence. 

(U//FOUO)  During  the  transit! on[  jwas  also  tasked  to  research  the  feasibility  of  obtaining  a 
secure  BlackBerry  for  CLINTOn]  [was  directed' to  do  this  by  a combination  of  the  following  people; 

DAN  SMITH  (Executive  Secretary),  LEWIS  LUKENS  (Deputy  Assistant  Secretary),  JOHN  BENTEL 
(S/ES-IRM  Director),  and  the  Operations  Center  Director  who  was  eitheij 


on 
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the  time.  DOS  wanted  to  assess  the  feasibility  of  using  secure  Black  Berry  phones  because 
CLINTON  and  her  staff  were  BlackBerry  users  so  DOS  wanted  to  provide  them  with  resources  that  they 
were  familiar  with.  However,  after  conducting  his  assessment]  [found  that  the  secure  BlackBerry 
phones  would  require  an  entirely  new  infrastructure,  which  was  cost  prohibitive;  and  the  actual  devices 
were  too  thick. 


(U//FOU0J  Iwas  shown  an  email  with  the  subject  “State  Department  Telephone  Services  at 
Secretary  Clinton’s  Residence”  that  he  sent  to  LUKENS  and  ABEDIN  on  January  27,  2009.  The  email 
summadz£d,the  telecom  equipment  that  was  installed  at  the  Whitehaven  residence.  After  reviewing  the 
email,  ;xplained  that  “CMS  VoIP”  line  referred  to  the  direct  phone  line  to  the  White  House  and  that 


the  “IST/Red  Switch”  was  a red  phone  that  was  installed  as  a backup  to  the  CMS  VoIP  line.  The 


Jstated  that  not  all  of  the 


“Business  Lines”  and  “Ops  Dedicated  Drop”  were  standard  phone  lines] 

install rH  equipment  belonged  to  DOS  and  noted  that  the  CMS  VoIP  system  belonged  to  the  White  House. 
jsaid  he  did  this  in  an  effort  to  give  the  Secretary  the  most  reliable  equipment  but  this  approach 


caused  some  strife  within  DOS. 


(U//FOU0)| I from  S/ES-IRM.  was  responsible  for  installing  and 

managing  CLINTON’S  computer  systems  at  the  residencesf  [coordinated  his  installation  activities 
with  S/ES'IRM  and  typically  did  not  conduct  his  work  when  they  were  on  site  in  effort  to  avoid  flooding 
the  residence  with  people. 

(U//FeUO)|  Iwas  shown  an  email  with  the  subject  “Secretary  Residential  Installation 

' 1 ' •'  ' on  March  1 7,  2009. 


ash”  that  he  sent  to  BENTELJ 
lexplained  that  a hotwas 


and 


I 1 I 

onducted  to  develop  a solution  for  any  technical  problems  they  had  or 


Hntw; 

complaints  that  they  received]  Stated  that  they  had  significant  issues  with  the  unclassified  telephone 
lines  at  the  residence  in  Chappaqua.  He  attributed  this  to  the  number  of  service  providers  that  a direct  line 
traversed  as  it  connected  Washington  and  Chappaqua.  As  a result  the  lines  consistently  had  bad 
connections.  Additionally,  the  red  phone  on  the  second  floor  in  Chappaqua  did  not  function  properly  and 
eventually  CLINTON  directly  aske({  ' ’ ^ ‘'■ 


0 remove 


the  phone[ 


stated  that  he  removed  the  phone  but 
it  created  some  internal  issues  for  him  as  the  phone  was  maintained  by  IRM  and  not|  [group. 

(U//FOUO)|  Istated  that  the  “Server:  Basement  Telephone  Closet,”  as  listed  in  the  attachment 
to  the  aforementioned  “Secretary  Residential  Installation  Hotwash”  email,  referred  to  the  point^ 
presence  for  the  telephone  system  in  Chappaqua  and  was  not  a reference  to  a computer  server.| 
aware  that  there  was  an  email  server  in  the  Chappaqua  residence.  However,  he  believed  it  was 
CLINTON’S  family  email  and  he  did  not  realize  that  CLINTON  was  using  the  server  for  DOS  business. 

[could  not  recall  when  he  first  learned  that  CLINTON  was  using  a private  email 
account  but  stated  that  it  was  sometime  during  her  tenure.  He  did  not  think  that  CLfNTON's  use  of  a 
private  email  account  was  odd  because  COLIN  POWELL  had  a private  email  account  that  he  accessed 
from  bos]  tlso  assumed  CLINTON  had  a DOS  issued  account.|  [did  not  communicate  directly 
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with  CLINTON  on  email  and  instead  worked  through  HUM  A ABED  IN  when  necessary)  iid  not 
recall  anybody  ever  expressing  concern  over  CLINTON’S  server  or  email,  but  noted  that  he  did  not  attend 
the  S/ES-IRM  meetings  were  such  topics  would  likely  have  be  discussed. 


b6 

b7C 


b6 

b7C 


(U//rOUO)  A copy  of  the  original  interview  notes  and  referenced  documents  are  attached  in  a 1 A 
envelope. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  5/16/2016 


counsel 


present  was 
Department  of  Justice  attomejj 


(U//FOUO)  On  May  12,  2016J 

Investigation  (FBI)  Special  Agents , i , 

F.1  spnh nwpT  F.xeci iti ve  O ffi ce  Building.  1650  Pennsylvania  Avenue  NW,  WashinRton,  DC  20502.  Also 


and 


was  interviewed  by  Federal  Bureau  of 
in  room  374  at  the 


agents,  and  the  purpose  of  the  interview 


attorney  ad 


and 


After  being  advised  of  the  identities  of  the  interviewing 
[provided  the  following  information: 


(U//FQU(^ is  currently  employed  as  the 


Security  Council 


at  the  National 


has  held  a Top  Secret/Sensitive  Compartmented  Information  (TS/SCI) 


clearance  since  2003  when  he  was  originally  sponsored  by  the  Central  Intelligence  Agency  (CIA). 


is  not,'  nor  has  he  ever  been,  an  Original  Classification  Authority  (OCA).  In  earlyl 


began  a fellowship  at  the  Denartment  of  State  fPOS)  in  the  South  Asia  Bureau.  After  moving  to  the  Iran 


desk  for  a few  weeks  ini 


began  working  aa 


Representative  for  Afghanistan  and  Pakistan  (SRAP).  While  at  the  SRAP  office 


for  the  Special 
worked  for 


PAUL  JONES,  FRANK  RUGGIFRO.  MARC  GROSSMAN  and  RICHARD  HOLBROOKE 


remained  working  for  the  SRAP  unti 


when  he  moved  tol 


at  DOS. 


was  unaware  of  how  information  flowed  to 
was  generally  aware  that  the  Executive  Secretariat  at 


he  Secretary  of  State 


bould  not  say  who 


(U//FOUO)  While  he  worked  at  the  DOS 
Secretary  of  State  HILLARY  CLINTON.|^_ 

the  DOS  was  responsible  for  information  f ow  to  

communicated  or  emailed  with  CLINTON.  |did  not  email  or  communicate  with  CLINTON 

directly  and  did  not  know  that  CLINTON  had  a private  email  address  hosted  on  a private  server  until  he 
was  made  aware  via  various  media  outlets  in  March  2015. 


(UZ/FOWO-l 


was  assigned  official  DOS  email  accounts  on  both  an  unclassified  network 


did  not  have  a Joint  Worldwide 
could  access  in  his  office,  hut  was 


and  the  Secret  Internet  Protocol  Router  Network  (SIPRNet) 

Intelligence  Communications  System  (JWICS)  email  account  that  he 

aware  that  he  was  issued  one  by  the  Bureau  of  Intelligence  and  Research  (INR)  at  the  DOS.[ 
indicated  he  rarely  used  his  JWICS  account  because  his  work  did  not  necessitate  it  and  it  hard  to 


access. 


]r.nti1Hnnt  recall  any  specific  DOS  training  pertaining  to  official  email  usage  guidelines. 


policies  or  practices. 


stated  “obvipusly  classified  information  goes  on  classified  systems/ 
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(u//Foue-j 


Stated  Principal’s  Committee  (PC)  meetings  were  initiated  by  the  National 
Security  Advisor  via  official  notice  to  government  agencies.  TTie  PC  meetings  would  involve  participating 
government  agencies  presenting  their  policy  on  topics  prescribed  by  the  National  Security  Advisor.  A 
Deputy’s  Committee  (DC)  meeting  would  involve  the  same  process  although  convened  by  the  Deputy 

National  Security  Advisor.  During tenure  at  the  DOS,  he  recalled  weekly  DC  meetings  related 

to  Afghanistan  and  Pakistan  issues.  While  in  the  SRAP  officej  Hwould  contribute  to  packages 
assembled  for  DC  and  PC  meetings.  Usually,  the  Deputy  SRAP  would  assign  various  taskings  for  a 
policy  paper  to  be  used  in  a DC  or  PC.  Within  the  SRAP  officej  ~^tated  there  was  no  science  as  it 

related  to  who  was  assigned  work.  The  assignments  could  be  based  on  your  area  of  expertise  or  vvho  you 


knew  within  DOS.I  I was  unaware  of  any  formal  process  when. collaborating,  drafting,  editing  or 


publishing  a written  product  with  another  bureau  or  office  at  the  DOS, 

(uz/FeufeJ 

written  nrodnct 


Iwas  unaware  of  the  term  “upclass”  as  it  refeired  to  the  classification  of  a 

.did  not  know  how  classification  of  a written  product  was  ultimately  decided. 

tecalled  seeing  mitten  product  with  suggested  classification  markings  and  he  would  always 


adhere  tn  those  by  appropriately  marking  the  same  information  carried  over  to  his  products  or  edits. 

stated  pnrtion  markings  at  the  DOS  were  uncommon  before  WikiLeaks  released  classified  DOS 


cables  on  their  websitef  lunderstood  the  classification  process  to  “happen  organically”  and  to  be 


“more  of  an  art  than  a science.” 

(U//FOU0)  At  this  point  in  the  interview.  Agents  displayed  documents  and  emails  concerning  a 
October  5,  2009  PC  meeting  involving  the  DOS 


provided  the  following  mfo.rmation; 


(u//Foue; 


recalled  the  general  topic  of  the  October  5,  2009  PC  meeting,  but  did  not 


stated  there  were  many  PC  and  DC 


recall  the  exact  meeting  or  any  of  the  displayed  documents, 
meetings  regarding  Pakistan  and  Afghanistan  policy  in  200^ 

any  portion  of  the  briefing  paper  or  the  attachments.  could  not  recall  who  drafted  any  of  the 

briefing  paper  or  the  attachments.  When  shown  metaitota  indicating  drafted  the  attachments 

associated  with  the  foregoing  briefing  paper  1 stated  the  metadata  interred  he  interacted  with  the 


"Idid  not  recall  drafting  or  editing 
5lri 


X Vi  Vi  — ^ r -IT 

attachments,  or  possibly  saved  them  at  one  point,  but did  not  recall  doing  so. 


(U//FOUO)  described  the|  ~feport  as  the  result  of  a review  of  Afghanistan  and 


Pakistan  policy  requestedinlieneral  STANLEY  MCCHRYSTAL.  The  report  resulted  in  a request  for  a 


recalled  there  beirig  a classified  version  of  the report  released  and 


troop  surge  in  the  area.^ 

then  shortly  after,  an  unclassified  version  released  ^ 

classified  and  unclassified  versions  of  a document  released  around  the  same  time 
report  as  relevant  one  dav  and  then  shortly  after,  irrelevant.  During  his  tenure  at  the 
not  recall  ever  reading  the]  "Report, 


[believed  it  was  st^dyd  practice  to  have  both 

escribed  the 
could 


(u//feuoj[ 

while  at  the  DOS, 


I recalled  having  no  concerns  over  classification  or  mishandling  of  documents 


b6 

b7C 


b€ 

b7C 


he 

hlC 


hS 

hlC 


b6 

b7C 


b6 

b7C 


b6 

b7C 


fD-302a{Rev.  10^6^95) 


Continuation  of  FD-302  of_ 


Interview  ofl 


, On  5/12/2016,  Page 


(U//FOUO)  Notes  of  the  interview  and  the  documents  displayed  foi| 
an  FD340  envelope  and  filed  with  the  captioned  investigation. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Dato  of  tcarsHption  2f  1 ^0 1 6 


(U//FOUO)  On  January  29,  2016 


tlate  cf 


interviewed  by  Federal  Bureau  of  Investigation  (FBI)  Special  Agents 


at  Starbucks  Cafe,  370  7 


(h 


Ave,  New  York,  NY  10001.  Reyve^eHIn^ 
Attorney  at  Law,  teleplione  (202) 


present  for  the  interview,  was 
advised  of  the  identities  of  the  interviewing  agents  and  the  purpose  Of  tiie 
provided  the  following  information: 


b6 

b7C 


fu//Fetjef 


joined  the  Department  of  State  rDoSl  iiT 


JAKE  SULLIVAN 


rfhereafter  she  became  th^ 

left  the  DoS  inj  |to  work  for  the 


as  a Special  Assistant  for 
under 


(U//-FeUO]l 


provided  that  as  a Special  Assistant  at  DoS  she  was  a political 
appointee.  Upon  starting  at  DoS  she  was  sworn  in  and  then  received  the  standard  on-boarding  and 


security  trainings.  However, 


could  liot  recall  any  specific  training  about  the  Freedom  of 


Information  Act  (FOIA)  or  the  Federal  Records  Act. 


(U//FOUO) 

’other  devices  that  she  used. 

DoS  and  did  not  email  directly  with  her  until  after  she  had  left  DoS 


ItipvRr  travRled  with  CLINTON  and  had  no  knowledge  of  her  iPad  or 
did  not  have  direct  contact  with  CLINTON  while  she  was  at  ‘ 


> 


new  that  CLINTON 


was  using  a personal  email  account  but  did  not  know  that  it  was  a potential  issue  until  she  read  about  it  in 
the  press 


Ivas  unaware  of  an  official  policy  at  DoS  regarding  the  use  of  personal  email 


accounts  and  recalled  that  other  people  on  CLINTON’S  staff  would  use  their  personal  emails  periodically 


(U//rOUO) 
handling  of  classified  information 
siv.^fptp  but  did  not  know 


held  a TS/SCI  clearance  while  at  DoS  and  received  training  on  the 
routinely  handled  classified  information  on  the 


how  such  intormation  was  transferred  from  SULLIVAN  or 


ko  CLINTON- 


hS 

hlC 


hS 

hlC 


he 

hlC 


he 

hlC 


(U//FOUO)  ZFS  is  a Limited  Liability  Corporation  (LLC)  th^t  was  established  for  the  Office  of 
Hillary  Rodharn  Clintonj  by 


(U//FOUO)  When 

brimnallv  ioined  thd 

based  in  Washington,  D.C.  at 

j 1 

The  office  then  moved  to  New  Y one  city  ii 
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Invtjstigalion  oit  2/ ] /2Q 1 (t 
File# 


at 


By 


bo2  -5'Z^ 


New  Ypik  City.  NY 


Date  dictated 


N/A 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  It  is  the  property  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency. 
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everybody  had  to  work  from  home  until 


he 

hic 

hS 

hic 


IU//FOUO) 


was  originally  an 

at  the 

^nd  was  onmarilv  responsible  for  arranging  nhone  calls,  drafting  memos  and  summarizing  news 

lorovided  the  names  and 


articles.  She  was  later  promoted  to  thd 


positions  of  the  following  individuals  who| 
that  time  period: 


during 


b6 

bVC 


HUM  A ABEDIN  - Chief  of  Staff 
MONICA  HANLEY  — Personal  Assistant 


ru//Feuef 


provided  that  Platte  River  Networks  (PRN^  provided  IT  support  to  the 


frequently  spoke  with 


from  PRN, 


about  routine  matters  such  as  purchasing  laptops  and  maintaining  the  IT  systems. 


fuz/peijotr 


[had  no  recollection  of  ever  receiving  a laptop  from  PRN  or 


spoke  with  HANLEY  regarding  this  matter  approximately  one  month  ago 
and  then  reviewed  her  email  records  to  see  if  she  had  any  further  information  about  the  laptop. 

found  one  email  between  her  and  HANLEY  in  which  they  discussed  sending  the  laptop  to 
PRN.  However,  the  discussion  transitioned  from  email  to  phone  ancj  had  no  further 

recollection  on  what  occurred,!  noted  that  this  occurred  during  the  period  when  everybody 


was  working  from  home  due  to  the  aforementioned  lease  issue.  Therefore,  if  the  laptop  was  shipped  to  her 

she  would  have  had  it  sent  to  her  apartment.  She  further  noted  that was  responsible  for  opening 

the  mail  for  the  office  but  that  he  would  not  have  opened  anything  directed  to  her  j 

speculated  that  perhaps  it  was  shipped  to  the  Clinton  Foundation  in  New  York  City  but  she  did  not  know 
what  they  would  have  done  with  it. 


(U//K)UO) 


had  no  recollection  of  CLINTON'S  erqails  being  turned  over  to  DoS. 


Nor  was  she  involved  in  the  culling  of  CLINTON'S  emails 
archives  of  CLINTON'S  emails  aside  from  the  laptop  in  question 


^rrj 


had  no  knowledge  of  any 
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(U//F0UO)  Following  the  interview, 

bgreed  to  provide  the  above  referenced  email 

hS 

chain  with  PRN  to  the  FBI.  On  Febniarv  3.  201 6 
email  to  SA 

counsel  electronically  provided  the 

hlC 

(U//FOUO)  A copy  of  the  original 
attached  in  a 1 A envelope. 


interview  notes  and  the  email  provided  b>i 


are 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  08/ 1 0/20 1 5 


to  the  Inspector  General,  United  States  Department  of  State,  Office 


(rV  — J ^ - 

of  Inspector  General  fSTATF.  TGI  2121  Virginia  Avenue,  NW,  Suite  8100,  SA-3,  Washington,  DC 

^ I I 1 ^ . . . _ . 1 T'T^T  ^ „ 


90n^7  telenhone  r2Q2H 
Agents 


land 


emai 


ii 


Agents  and  the  nature  of  the  interview 


Sstatc.gov  was  interviewed  in  person  by  FBI  Special 
After  being  advised  of  the  identity  of  the  interviewing 
provided  the  following  information: 


b6 

bVC 


In  early  March  2015,  the  New  York  Times  published  an  article  about  Secretary  Clinton’s  personal 
email  account  while  at  the  Department  of  State.  The  article  alleged  Secretary  Clinton  used  a personal 
email  account  to  conduct  official  government  business  in  violation  of  federal  laws.  Sometime  thereafter, 
John  KERRY,  Secretary  of  State,  sent  STATE  IG  a letter  requesting  a review  of  email  and  records 
management  at  the  Department  of  State.  On  or  about  March  1 2,  201 5,  STATE  IG  and  Office  of  the 
Inspector  General  of  the  Intelligence  Community  (ICIG)  received  letters  from  Congress  requesting  a 
review  of  State  Department  employees’  use  of  personal  email  for  official  purposes  and  coordination  with 
relevant  agencies  to  determine  whether  classified  information  was  transmitted  or  received  by  State 
Department  employees  over  personal  systems. 


STATE  IG  initiated  a review  of  the  use  of  personal  communications  hardware  and  software  by 
five  Secretaries  of  State  and  their  immediate  staffs.  The  review  went  as  far  back  as  former  Secretary 
Madeleine  ALBRIGHT.  In  Fall  2014,  the  Department  of  State  wrote  to  the  last  four  Secretaries  of  State 
asking  whether  they  had  any  official  email  in  their  personal  records.  The  Department  of  State  issued 
preservation  requests,  asking  each  former  Secretaiy  to  preserve  all  electronic  data  they  had  while  at  the 
Department  of  State.  Secretary  Colin  POWELL  responded  that  he  used  an  America  on  Line  (AOL) 
account.  Secretary  ALBRIGHT  reported  that  she  did  not  have  personal  accounts  with  official  records. 
Secretary  Condoleezza  RICE  reported  having  a Gmail  account,  which  she  did  not  use  for  official 
purposes. 


In  response  to  the  preservation  request,  Secretary  Clinton’s  attorney,  David  KENDALL  wrote  a 
letter  to  STATE  IG  stating  Williams  & Connolly,  LLP  was  in  possession  of  three  thumb  drives  with 
Secretary  Clinton’s  email  from  her  private  network.  KENDALL  and  Katherine  TURNER  were  the  only 
people  at  the  firm  with  access  to  the  thumb  drives.  The  letter  further  stated  Platte  River  Networks  was  in 
possession  of  the  server  and  had  been  made  aware  of  the  preservation  request. 


Investigation  on  Q8/Q7/2Q15 at  Washington,  DC 


b3 

b7E 

hS 

hlC 


FD-302a(Rev.  10-6-95) 


Continuation  of  FD-302  of  Interview  on 


, On  08/10/2015.  Page 


lllUfJ  r Vi  ^ --.,-  

In  December  2014,  Williams  & Connolly,  LLP  produced  twelve  boxes,  approximately  fifty  five 
thousand  pages  of  about  thirty  thousand  emails  to  the  Department  of  State  from  Secretary  Clinton’s 
private  server.  There  is  a court  order  in  place,  which  requires  all  thirty  thousand  emails  to  be  released  by 
January  30,  2016.  The  emails  have  to  be  released  on  a monthly  basis.  The  emails  are  released  based  on 
select  percentages.  Thus  far,  two  waves  of  Secretary  Clinton’s  emails  have  been  released  on  the  FOIA 
website.  Department  of  State  had  about  fifty  to  sixty  people  working  on  Secretary  Clinton’s  emails  fix  tSe 
FOIA  review  process. 


Upon  receipt  of  the  emails,  they  were  scanned,  entered  to  the  OCR  process  and  then  uploaded  to 
Department’s  of  State  ClassNet  system,  which  was  classified  up  to  SECRET.  The  emails  were  then 
divided  into  sub-groups.  Then  each  email  went  through  the  FOIA  process  to  determine  the  appropriate 
FOIA  exemptions,  if  any.  Ultimately,  the  emails  were  publicly  released.  Initially,  senior  State  Department 
officials  were  being  used  to  review  the  emails.  The  officials  would  review  the  email,  identify  which  State 
Department  equity  worked  on  the  information,  and  would  then  send  the  email  to  that  department.  The 
receiving  department  would  then  identify  certain  exemptions  and/or  send  to  other  agencies,  if  other 
agency  equities  were  involved.  The  emails  would  come  back  to  Department  of  State  for  further  review 
and  were  ultimately  reviewed  on  the  FOIA  website.  The  B (1)  exemption  was  used  to  protect  sensitive 
Department  of  State  equities.  B (5)  exemptions  were  used  to  redact  internal  deliberations.  B (6) 
exemptions  were  used  to  redact  Personally  Identifiable  Information  (PII). 


STATE  IG  brought  in  ICIG  to  assist  with  the  identification  of  classified  information  and  to  take  a look 


at  the  FOIA  review  process 
review  nrncess  I 

H 


prom  ICIG  reviewed  Department  of  STATE’S  FOIA 


Ibrought  broader  experience  to  Department  of  State’s  assembly  line  review 
process.  | |quickly  determined  Department  of  State  needed  to  make  some  changes  to  their  review 

process.  On  or  about  June  19,  2015  STATE  IG  and  ICIG  jointly  made  four  recommendations  to  the  State 


Department  related  to  the  FOIA  review  process.  The  recommendations  were  as  follows: 


1 . Recommend  State  Department  FOIA  office  request  staff  support  from  IC  FOIA  offices  to  assist  iii 
the  identification  of  intelligence  community  equities; 

2.  Recommend  IC  FOIA  officers  review  the  emails  to  ensure  that  ClassNet  use  is  appropriate  before 
transmitting  to  the  State  Bureaus  for  review; 

3.  Recommend  State  Department  FOIA  seek  classification  expertise  from  the  interagency  to  act  as  a 
final  arbiter  if  there  is  a question  regarding  potentially  classified  materials;  and 

4.  Recommend  State  Department  FOIA  Office  incorporate  the  Department  of  Justice  into  the  FOIA 
process  to  ensure  the  legal  sufficiency  review  of  the  FOIA  exemptions  and  redactions. 

Patrick  KENNEDY,  Under  Secretary  for  Management,  U.S.  Department  of  State  was  a key  figure  in 
all  of  this.  KENNEDY  accepted  FOIA  recommendations  number  one  and  three  on  behalf  of  the 
Department  of  State.  During  a July  2015  meeting  with  STATE  IG  and  KENNEDY,  KENNEDY  said 
something  to  the  effect  “We  sent  our  folks  from  Diplomatic  Security  (DS)  to  conduct  a security 
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assessment  of  Williams  & Connolly”.  DS  concluded  Williams  & Connolly  had  procedures  in  place  to 
secure  the  three  thumb  drives.  KENNEDY  mentioned  Williams  & Connolly  handled  the  General  Petreaus 
investigation,  so  they  had  the  appropriate  clearances  and  were  safe.  STATE  IG  left  that  meeting  with  the 
impression  that  Department  of  State  had  an  electronic  copy  of  Secretary  Clinton’s  emails.  Later,  STATE 
IG  was  told  that  Department  of  State  did  not  have  an  electronic  copy.  STATE  IG  still  would  like  to  obtain 
an  electronic  copy  of  the  thumb  drives. 


be 

b7C 


STATE  IG’s  review  focused  on  the  following  areas: 

])  Preservation  of  Records 

a.  Are  records  being  preserved  for  arc  bi vat  purposes? 

b.  Are  appropriate  systems  in  place  for  Freedom  of  Information  Act  (FOIA)  purposes? 

c.  Are  records  being  kept  Iji  line  with  the  Federal  Records  Act? 

2)  On-Boarding  Process 

a.  How  are  methods  of  communications  established  for  new  Secretaries? 

b.  Each  Secretary  may  like  various  devices,  how  does  Department  of  State  make  those  devices 
secure  for  usage  at  Department  of  State? 

c.  How  had  Department  of  State  addressed  security  issues? 

d.  How  did  State  Department  set  up  secure  phone  line  at  Secretary  Clinton’s  house? 

e.  What  precautions  were  in  place  for  personal  devices? 

3)  Records  Creation  Designation 

a.  How  does  State  Department  make  sure  draft  docurnents  get  captured  in  Department  of  State’s 
records  retrieval  process? 

4)  How  has  Department  of  State  handled  FOIA  and  the  Congressional  Process? 

I [opined  Department  of  State’s  record  keeping  process  was  not  good.  Prior  to  the  last  couple 
of  years,  record  keeping  was  done  on  a print  and  file  basis.  Literally,  if  someone  wanted  something  to  be 
kept  as  an  official  file,  that  person  would  have  to  print  the  document  and  request  another  person  file  it 
away.  STATE  IG  was  in  the  process  of  taking  a deep  dive  into  the  on-boarding  process  of  Secretary 
Clinton’s  server. 


Secretary  Clinton  preferred  to  use  Blackberries.  In  fact,  she  had  at  least  two  email  accounts  that 
went  directly  to  her  blackberry  account.f  [was  not  sure  whether  Secretary  Clinton  had  an 
Information  Technology  (IT)  infrastructure  from  her  time  in  the  U.S.  Senate  or  her  presidential  campaign. 
Bryan  PAGLIANO  worked  in  IT  support  for  Secretary  Clinton’s  campaign.  Shortly  after  Secretary 
Clinton  started  her  tenure  at  Department  of  State,  PAGLIANO  was  hired  as  a Schedule  C,  directly 
reporting  to  Secretary  Clinton.  PAGLIANO  set  up  Secretary  Clinton’s  personal  server  and  provided  her 
direct  IT  support.  PAGLIANO  left  the  Department  of  State  sometime  in  2013  and  came  back  in  early 
2015  as  a contractor.  STATE  IG  contacted  PAGLIANO  part  of  STATE  IG’s  ongoing  review.  STATE 
IG  was  informed  PAGLIANO  was  represented  by  attorneys  from  Akin  Gump  Straus  Hauer  & Feld,  LLP. 


FD-302a(Rev.  10-6-95) 
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PAGLIANO  refused  to  talk  without  being  granted  immunity  from  prosecution. 
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Secretary  Clinton  had  at  least  two  AT&T  blackberry  accounts.  The  first  account  was  the  HRl  5 
email  account.  In  September  2013,  there  was  an  article  about  Sydney  BLUMENTHAL  having  his  email 
account  hacked.  Apparently  Secretary  Clinton’s  HRl 5 account  was  cited  in  that  article.  As  a result, 
Secretary  Clinton  changed  her  eniail  to  HRD14. 


I [believed  that  Secretary  Clinton’s  server  at  some  point  was  held  at  her  Chappaqua 

residence.  Department  of  State  would  send  an  advance  team  to  set  up  Secretary  Clinton’s  communications 

wherever  she  neededJ ^did  not  know  who  paid  for  the  server,  Huma  ABEDIN  and  Cheryl  MILLS 

were  the  conduits  for  contacting  Secretary  Clinton.  Only  a few  people  at  the  Department  of  State  were 
able  to  contact  Secretary  Clinton  directly. 

As  part  of  STATE  IG’s  ongoing  review  I 


1) 

2) 

3) 


b5  per  DOS 


I pecommended  th 

Department  of  State  employees 


Ik  to  PAGLIANO, and who  were  all 

was  willing  to  provide  the  FBI  with  assistance  as  necessary. 
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Date  of  transcription  6/3/2016 


n]//PnTJ|»)  On  June  %,  IJejiartment  of  State  (DoS]| 


iaiaa±iteiid£w*J  tiy  .‘"Oderal  B ureau  of  Investigation  fFMVSpeda^^ 
_ in  his  office  located  atL 


Virginia.  After  being  advised  of  the  identities  of  the  interviewing  agents,  and  the  purpose  of  the 


? 


interview. 


provided  the  following  information: 


tq 


JIM 


was  the 

firorri 

PnWKT  .1,.  and  Hll.LARY  R.  CLINTON  at  DoS. 


most  recently  reported  to 


(U//F©IiO)| ^ 

(IT)  Operations  for  OoS.  This  included,  but  was  not  limited  to,  soft  war  e^applications,  hardware, 

telecommunications,  email.  " 


DoS  Information  Resource  Managenient  (IRM). 


(u//Fetje)l 


provided  IT  briefings  to  CLINTON’S  transition  team  upon  their 


arrival,  however,  the  DoS  executive  office  did  not  fall  undeij jresponsibility.  JOHN 

RFNTF.I.  who  oversaw  Executive  Secretariat  Information  Resource  Management  (S/ES-  IRM),  would 
have  been  in  regards  to  managing  IT  programs  for  executive  management. 


(U//rOUO)  Around  the  time  of  Cl. INTON’ s onboard  transition,  PATRICK  KENNEDY,  Under 

' ' I I . » T r i I T T-^  X T T A Tk.  T i_  _ 


interview  BRYAN  PAGLIANO,  who 
interviewed 


bnd 


Secretary  of  State  for  Management,  suggested^ 

served  on  CLINTON ’s  20 1 2 Presidential  Campaign.  , , 

PACtT  IANO.  who  had  a MBA  from  the  University  of  Maryland.  Alter  interviewing  PAGLIANO, 
^agreed  he  would  be  a good  fit  for  team,  PAGLIANO  was 

subsequently  hired  on  to  DoS  in  a Schedule  C position,  and  was  taslced  with  assisting  mainly  with  cost 
recovery  planning  and  researching  DoS  technical  enhancement  opportunities. 

(U//FOUO) was  not  aware  PAGLIANO  had  a secondary  role  of  providing 

technical  assistance  to  CLINTON.  Although  [was  aware  PAGLIANO  came  from 

CLINTON’S  campaign,  he  noted  PAGLIANO  did  not  have  any  overtly  apparent  ties  to  the  T floor  [a 

“ only  recalled  one 


reference  to  where  CLINTON'S  executive  suite  was  located  at  DoS]. I 
incident  wherein!  dealing  with  a matter  that  need 


ivas  dealing  with  a matter  that  needed  input  from  the  7^  floor,  and 

1 1 . . -.1  1'  ■ 1..  l_  'rth  ri 13  A T A 


PAGLIANO  mentioned  he  occasionally  had  contact  with  individuals  on  the  floor.  PAGLIANO 


investigation  on 

szz 


File# 


6/3/2016  at 

biB- 


lA. 


Date  dictated 


N/A 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  It  is  the  property  of  the  fB[  and  is  loaned  to  your  a 
and  its  contents  are  not  lo  be  distributed  outside  your  agency.  . 
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offered  to  reach  out  to  his  7**’  floor  contacts,  but  iismissed  the  offer  arid  proceeded 

through  regular  channels.  As  a Schedule  C hire,  PAGLIANO  would  hus'C  been  required  toTcport  any 
additional  income  he  received  from  side  work  with  CLINTON. 


(UZ/rOUC) 


was  not  aware  of,  nor  did  he  ha'ye  ipj 


iscussions  with  PAGLIANO 
^jdid  not  have 


concerning  CLINTON’S  use  of  a private  email  account  or  email  serVef.] 

direct  correspondence  with  CLINTON,  and  learned  of  her  use  of  a p'ivnite  emiil  se'-verwhen  he  read 
about  it  in  the  New  York  Times. 


(U//Fewe)  It  was 


understanding  that  DoS  policy  “discourages”  the  use  of 


private  email,  but  does  not  prohibit  it. 


Iwas  not  aware  of  the  specific  IT  setup  in  either  CLINTON’S  office  or 


(U//Fe«e)| 

her  resiidenres  However,  he  believed  both  of  CLINTON’S  residences  had  a DoS  Secure 


and/or 


was  assigned  to  the  “ 
the  T**"  floor. 


help  desk.”  ^ 


may  have  had  knowledge  of  her  office  setup 


also  assessed 


I worked  fo 


1 


and 


~~\  but  lati 
[tnav  also 


but  later  went  to  work  on 
have  more  insight 
kvas  an  IRM 


as  to  what  DoS  IT  equipment  was  installed  at  both  of  CLINTON’S  resirtencos, 

technician  who  would  know  who  installed  DoS  equipment  at  the  Seoretury’s  homes. 

(U//FOUe)  The  State  Messaging  and  Archival  Retrieval  Toolset  (SMART)  records  management 
system  was  implemented  by  IRM  as  a result  of  recommendations  from  a DoS  Executive  Steering 
Committee.  SMART  replaced  DoS’s  tel earanh  system,  and  was  developed  to  automate  / streamline  the 


process  for  archiving  records. 


^ ^ , ]was  involved  in  discussions  about  the  development  and 

rollout  of  SMART,  as  were  representatives  from  SES.  Representatives  from  the  Executive  Secretariat 
asked  to  be  the  last  to  receive  the  SMART  rollout.  However,  ultimately  SMART  was  never  rolled  out  to 

the  Executive  Secretariat. could  not  recall  exactly  when  SMART  was  implemented  at 

DoS,  however,  he  assessed  SMART  was  rolled  out  sometime  in  2007  - 2008. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U//FOli0)  A copy  of  the  original  interview  notes  are  attached  in  a lA  envelope. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transcription  5/1 1/2016 


SSA^ 


OiZZEfiiiei^n  May  10,  201  ej] 
lw£ 


DOB 


was  interviewed  by  Federal  Bureau  of  Investigation  ( 
at  his  residence 


telephone  20' 
BlVspecial  Agentsl 


advised  of  the  identities  of  the  interviewing  agents,  and  the  purpose  of  the  interview, 
following  information: 


MD.  After  being 


|provided  the 


(U//FOUO)[ 


served  as 


ofState  (DoS)  from  the  beginning  of  KERRY'S  tenure  to 


berved  as 


Relations  Committee, 


lat  the  Department 


Prior  to  joining  DoS, 


when  KERRY  was  the  Chairman  of  the  Senate  Foreign 


(U//FOUO)  A lot  of  information  would  flow  through] 
information  concerning  Congressional  Oversight 


bn  route  to  KERRY,  to  include 


[was  tangentially  frjvolved  in  the  process  of 

I to  ensure  the 


i 


production  of  DoS  records  to  the  Benghazi  Committee,  in  that  KERRY  aske 
Committee  did  not  face  any  DoS  roadblocks  in  response  to  the  request.  Furthermore!  [wanted  to 

make  certain  DoS  was  as  comprehensive  as  possible  in  their  response  to  the  Committee’s  request, 
was  primarily  concerned  with  KERRY  being  questioned  by  the  Committee  over  the  totality  of  the 
production,  and  thus  wanted  to  cover  every  production  avenue  possible  to  avoid  KERRY  being  blindsided 
if  called  to  testify  to  the  Committee,  The  production  of  documents  related  lo  Benghazi  began  in  the 
spring  (April/May)  of  2013  and  continued  as  a “rolling  production,” 


(U//Fee©)^ 


was  not  aware  former  Secretary  of  State  FllLLARY  R.  CLINTON  was  using  a 


private  email  account  until  2013,  when  he  recalled  hearing  news  of  her  email  account  potentially  being 
compromised  as  a result  of  a hack  into  Sidney  BlumenthaFs  email  account.  advised  KERRY  to 


use  a government  email  account  when  he  became  Secretary  of  State,  despite  what  previous  Secretary’s 


may  have  chosen  to  do: 
maintained  on  a private  server. 


Iwas  not  aware  until  recently  that  CLINTON’S  private  email  account  was 


hS 

hic 


hS 

hlC 


he 

hlC 


b6 

b7C 


CLINTON  used  a personal  email  account,  as  he  was  aware  other  Secretary’s  of  State  had  done  the  same. 


^ b6 
b7C 


Investigation  on  5/10/2016 at Washington.  D.C. 
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and  its  contents  are  not  to  be  distributed  outside  your  agency. 
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(U//FOUO)  In  August  or  September  of  201 4^  [went  to  Capitol  Hill  to  meet  with  the  staff 

members  of  the  Benghazi  Committee,  in  preparation  for  a pending  hearing  with  KERRY, recalled 

the  topic  of  issue  in  his  meeting  with  the  committee  staff  surrounded  inquiries  regarding  the  preservation 

of  records.  Following  his  meeting  with  the  committee  staffJ ^contacted  CHERYL  MILLS  to  advise 

of  possible  leaks  from  the  committee  referencing  their  production  concerns  related  to  CLINTON’S  email. 

Irecalled  at  least  one  phone  conversation  with  MILLS  concerning  the  matter.  also  spoke 

with from  a Public  Affairs  Derspective.1  also  had 

some  visibility  in  the  matter,  as 


(U//FOU0)  In  approximately  December  of  2Q14.| 

CLINTON  emails  being  dropped  off  at  DoS. wa 

and  believed  the  production  to  be  close  to  50.000  nages. 

Last  N^e  Unknown  (LNU)  and|  LNU  | 

, were  brought  onto  DoS  to  heln  nrnces 

Benghazi  FOIA  production.  ^escribed 


'2014.| recalled  a large  number  of  printed 

was  surprised  at  the  volume  of  emails  produced 

lages.  Two  attorneys  from I 

LNU  [believed  to  be  a reference  to  md 

irncess  and  coordinate  the  redactions  in  regards  to 
ps  someone  who  would  be  “encyclopedic” 


concerning  the  process  of  production  regarding  Benghazi,  to  include  the  production  of  CLINTON’S 

email.  DoS was  also  involved  with  the  DoS  production  and 

review  process  as  it  pertained  to  CLINTON’S  emails  and  Benghazi  as  a whole.  PATRICK  KENNEDY, 
DoS  Under  Secretary  for  Management,  also  had  insight  into  the  production  process. 

(U//FOUO)  During  the  course  of  the  Benghazi  production,  DoS  recognized  there  was  a gap  in 
records  related  to  emails  pertaining  to  not  only  CLINTON,  but  other  former  Secretaries  of  State  who  did 
not  use  DoS  email  accounts.  As  such,  Executive  Secretary  JOSEPH  McMANUS  drafted  a letter  in 
October  2014,  requesting  former  Secretaries  produce  any  personal  emails  responsive  to  the  Federal 
Records  Act  in  attempt  to  retroactively  address  the  gap  in  DoS  records. 

(U//FOUO)  was  not  involved  with  the  discussions  or  the  process  concerning  how  the 

email  production  was  conducted. did  not  provide  direction  on  how  the  emails  should  be 

produced,  nor  did  he  have  any  knowledge  of  what  methodology  was  used  in  determining  what  emails 
were  responsive  to  production  requests.  was  unaware  of  any  concerns  that  the  original  production 

of  emails  provided  by  CLINTON  was  hot  entirely  comprehensive  in  response  to  the  request,  nor  was  he 
aware  of  any  concerns  that  the  email  production  might  contain  classified  material. 


(U//rOU0)  A copy  of  the  original  interview  notes  are  attached  in  a 1 A envelope. 
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Date  of  transcription  07/23/2015 


(u//Fefcfe) 


date  of  birtra 


■b3  per  ODNI 
b6  per  FBI 
b7C  per  FBI 


was  interviewed  at  the 


Oifice  of  the  Inspector  General  of  the  Intelligence  Community.  Patriot  Park.  12290  Sunrise  Valiev  Driv^ 
Reston.  Virginia  201 91.  Also  present  during  the  interview  were 


and 


the  interview. 


1 After  being  advised  of  the  identity  of  the  interviewing  Agents  and  the  nature  of 


!ni 


provided  the  following  information: 

^ b3  per  ODNI 

- b6  per  FBI 

jhad  worked  as  an  Inspector  in  the  Office  of  the  Inspector  General  of  the  b7c  per  fei 


Intelligence  Community  (IC/IG)  for  approximately  2 years.  In  May  2015,  IG/IC  began  to  assist  in  the 
Department  of  State’s  Inspector  General’s  (STATETIG)  review  entitled  “Use  of  Personal  Communications 
Hardware  and  Software  by  Five  Secretaries  of  State  and  Their  Immediate  Staffs.”  This  assistance  was 
requested  pursuant  to  the  March  12, 2015  letter  from  the  United  States  Senate. 


tU)  On  or  about  May  28,  2015 


met  witq 


Ithe 


Inspector  General,  United  States  Department  of  State  (STATE)  and  other  STATE  employees  in  order  to 
assist  in  completing  the  review.  It  appeared  that  STATE  Freedom  of  Information  Act  (FOIA)  employees 
were  at  least  already  6 weeks  into  the  review  process.]  [immediately  recognized  problems  that 

impeded  STATE’S  review  process.  Some  of  the  problems  were  1)  STATE’S  computer  software  was  at 
least  2 generations  behind;  2)  the  optical  character  recognition  (OCR)  was  faulty;  and  3)  STATE 
employees  used  initials  to  describe  organizations,  as  opposed  to  using  intelligence  designations. 

ound  STATE  FOIA  employees  very  helpful.  On  various  occasions  many  of  the  FOIA  officials 


b6  per  FBI 
b7C  per  FEI 


Stayed  after  midnight  to  conduct  the  emaiTreview. 


On  or  about  May  22,  2015,  STATE  publicly  released  two  hundred  ninety-six  e-mails 
belonging  to  former  Secretary  of  State  Hilary  Clinton  (CLINTON).  The  two  hundred  ninety-six  e-mails 
were  previously  reviewed  and  released  by  STATE  FOIA  officials  in  response  to  previous  FOIA  requests. 
According  to  the  Defense  Intelligence  Agency,  National  Security  Agency,  and  National  Geospatial 
Intelligence  Agency  officials,  at  least  one  of  those  un-redacted  e-mails  should  have  been  treated  as 


Investigation  on  07/23/2015 
File^ 


at 


Reston,  Virginia 


Date  dictated  N/A 


By  SA 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  [t  is  the  property  of  the  FBI  and  is  loaned  to  your  agency:  it 
and  itsLCgntents  are  not  to  be  distributed  outside agency. 

Classi 
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b3  per  ODNI 


classified.  On  or  about  June  25, 2015  the  IC/IG  notified  the  Director  of  National  Intelligence  and 
members  of  the  senate  of  this  leak  of  classified  information.  . 


IC/IG  believed  that  the  release  of  the  two  hundred  ninety-six  e-mails  did  not  comply  with 
FOIA  regulations.  In  fact,  public  figures  were  completely  redacted  from  the  TO,  FROM  and  CC  lines,  in 
violation  of  F 01 A regulations.  It  also  appeared  that  no  STATE  FOIA  personnel  knew  how  the  two 
hundred  ninety-six  e-mails  had  been  selected  to  be  released.  STATE  FOIA  personnel  indicated  during  the 
FOIA  review  process,  some  B1  (Classified  National  Security  Trifnrmatinn)  were  removed  and  changed  to 


B5  FOIA  exemptions  (Privileged  Communications), 


pelieved  STATE  FOIA  redactions  of  b3  per  odni 

classified  information  were  inappropriately  designated  or  changed.  b6  per  fbi 

b7C  per  FBI 

(U)  The  two  hundred  ninety-six  emails  were  taken  from  approximately  fifty-five  thousand 

pages  of  thirty  thousand  e-mails  provided  to  STATE  by  the  Law  Offices  of  Williams  & Connolly  LLP, 

(William  & Cormolly)  CLINTON’S  personal  counsel.  According  to  Williams  & Connolly,  the  firm  had 
provided  all  of  CLINTON’S  work  related  or  potentially  work  related  e-mails  from  her  @cIintonemail.com 
account.  Williams  & Connolly  also  maintained  a copy  of  the  .PST  file  containing  the  electronic  copy  of 
the  above  referenced  e-mails,  on  a thumb  drive,  stored  in  a secure  safe  at  Williams  & Connolly’s 
Washington,  DC  office.  David  Kendall  (KENDALL)  and  Katherine  Turner,  Esq.  (TURNER)  were  the 
only  two  people  that  had  access  to  the  thumb  drive.  The  firm  further  advised  they  believed  the  server 
equipment  used  to  host  CLINTON’S  @clintonemaiI. com  account  was  no  longer  valid  or  active.  Platte 
River  Networks  in  Colorado  maintained  custody  of  the  equipment  and  had  received  preservation  notices. 


XSi6^)  IC/IG  had  considered  serving  legal  process  to  Williams  & Connolly  in  order  to  retrieve 
the  thumb  drive.  Diplomatic  Security  had  attempted  to  retrieve  the  thumb  drive  from  William  & 
Connolly,  but  were  informed  that  since  the  firm  had  received  preservation  letters  fnr  thp  .PST  files,  the 
firm  could  not  release  the  thumb  drive  to  Diplomatic  Security.  According  to  ^ 


Security  was  led  to  believe  Williams  & Connolly  in  fact  had  3 copies  of  the  thumb  drive. 


Diplomatic  b3  per  ODNI 
b6  per  FBI 
b7C  per  FBI 


iU)  December  20 14;^  Williams  & Connolly  informed  STATE  they  had  fourteen  boxes 

contaijiing  the  approximately  thirty  thousand  e-mails.  However,  when  STATE  officials  arrived  to  pick  up 
the  boxes,  STATE  only  received  twelve  boxes.  IC/IG  had  no  information  as  to  whether  Williams  & 

Connolly  were  authorized  to  store  classified  information  or  if  KENDALL  and  TURNER  held  security 
clearances. 

b3  per  ODN3 
b€  per  FBI 


were  suspicious  ot  the  spec 
and 


surmised 


and  other  STATE  FOIA  nfficiak 


al  appointments  to  STATE  Legislatiyp  Affairs  of  attorneys 


involvement  off 


pn3f 


b7C  per  FB] 


and  other  STATE  FOIA  personnel  b 


in  the  FOIA  review  process  was  abnormal. 


made  recommendations  and  requested  additional  changes  that  were  not  routine. 


both  previously  had  worked  at 


an 

and 


which  appeared  to  create  a conflict  of  interest. 


KD-302a(Rev,  10-6-95) 


Continuation  of  FD-302  of  Interview  of| 


Relieved  both  attorneys  had  also  worked  at  the 

T T ^1  r> c^ 


b3  per  ODNI 
b6  per  FBI 
b7C  per  FBI 


involved  in  the  Lois  Lemer,  Internal  Revenue  Service  situation. 


and  was  possibly 


(U//FOUO)  On  or  about  June  15, 2015  IC/IG  sent  a letter  to  STATE/JG  documenting  potential  issues 
identified  in  the  Preliminary  Review  of  the  State  Deparlment  FOIA  Process.  The  recommendations  were; 


b3  per  ODNI 
b6  per  FBI 
b7C  per  FBI 


1. 


Recommend  State  Department  FOIA  office  request  staff  support Troni  IC  FOIA  offices  to  assist  in 
the  identification  of  intelligence  community  equities; 

Recommend  IC  FOIA  officers  review  the  email  to  ensure  that  ClassNet  use  is  appropriate  before 
transmitting  to  the  State  Bureaus  for  review; 

Recommend  State  Department  FOIA  seek  classification  expertise  from  the  interagency  to  act  as  a 
final  arbiter  if  there  is  a question  regarding  potentially  classified  materials; 

Recommend  State  Department  FOIA  Office  incorporate  the  Department  of  Justice  into  the  FOIA 
process  to  ensure  the  legal  sufficiency  review  of  the  FOIA  exemptions  and  redactions;  per  odni 

b6  per  FBI 

On  or  about  June  26-27,  2015,  a review  of  the  thirty  thousand  e-mails  revealed  five 


additional  classified  e-mails, 


, I used  key  word  searches  in  order  to  review  the  e-mail.  It  appeared 

that  one  in  every  five  e-mail  addresses  were  not  a .GOV  e-mail  address.  In  the  thirty  thousand  e-mails 
there  were  about  seventeen  unsigned  classification  upgrade  memorandums.  These  memorandums  were 
packages  of  information  which  were  being  held  for  the  Assistant  Secretary  of  State  for  Administration’s 
signature. 


On  or  about  July  1 , 201 5,  IC/IG  officials  met  with  Patrick  Kennedy,  Under  Secretary  of  State 
for  Management  and  other  STATE  representatives.  IC/IG  informed  STATE  thatlCZKLmuJd  assist 


STATE/IG  conduct  the  review,  whether  or  not  STATE  welcomed  IC/IG’s  input. 


f 


lleged 


b3 

b6 


per  ODNI 


STATE  made  several  misrepresentations  during  this  meeting.  One  such  statement  made  by  STATE’S  b7c 


per  FBI 


legal  counsel  was  “there  were  no  classified  information  contained  in  the  thirty  thousand  e-mails' 
was  willing  to  assist  the  FBI  further  as  needed. 


per  FBI 


b3  per  ODNI 
b6  per  FBI 
b7C  per  FBI 
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United 


StatesJOenartnient  of  State,  Office  of  Inspector  General  fSTATE  IGl  2121  Virgirua  Avenue,  NW,  Suite 


8100J 


Washington,  D.C.  20037,  telephone  (202)[ 


emai 


i£ 


1^) state. aov.  date  of  birth 


was  interviewed  in  person  by  FBI  Special  Agents] 

her  office.  After  being  advised  of  the  identities  of  the  interviewing  Agents  and  the  nature  of  the 
interview,  provided  the  following  information: 


in 


began  working  for  STATE  IG  in 

asl 

In 

she  became 

Evaluations 

and  Special  Projects  unit,  which  consisted  of  approximately  10  people  from  both  STATE  IG  and  the 


Jworked  on  Congressional  requests 


Intelligence  Community  Inspector  General  (ICIG). 

and  other  special  inquiries  that  are  handled  by  STATE  IG,  which  included  a special  project  related  to  the 
Freedom  of  Information  Act  (FOIA)  process  as  a whole. 


STATE  IG  were  in  the  process  of  conducting  a review  at  STATE,  focused  on 
three  main  areas.  Those  areas  were  how  1)  STATE  records  are  preserved;  2)  how  STATE  employees 
handled  the  FOIA  process;  and  3)  the  on-boarding  process  for  new  STATE  employees,  specific  to 
methods  of  communication,  with  an  emphasis  on  the  Secretaries  of  State.  As  part  of  that  review, 
sent  a questionnaire  in  late  March  2015  to  the  former  Secretaries  of  State  Madeleine 


ALBRIGHT,  Colin  POWELL,  Condoleezza  RICE,  and  Hillary  CLINTON  along  with  current  Secretary 
of  State  John  KERRY.  The  questionnaire  specifically  asked  them  about  their  use  of  personal  email  for 
work  purposes. 

On  April  1 5,  201 5 STATE  IG  sent  out  requests  to  a broad  number  of  STATE-related  persons, 
including  former  staff  members  and  others  who  may  have  sent  or  received  work-related  emails  to  or  from 
the  personal  email  accounts  of  the  former  Secretaries  of  State.  The  request  asked  for  personal  emails  and 

any  policy  or  training  given  related  to  the  use  of  personal  email  for  business  purposes. had 

not  yet  received  any  email  files  fi:om  any  of  the  staff  members  of  the  former  Secretaries  of  State  and  was 
told  that  there  would  be  no  response  to  the  request  by  the  attorney  of  Bryan  PAGLIANO,  former 
information  technology  advisor  for  CLINTON. 

CLINTON  sent  out  an  all-staff  cable  that  personal  email  should  not  be  used  day-to-day  for 
business  purposes  and  that  personal  email  is  not  secure,  so  do  not  use  them  for  business  purposes.  To  the 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 
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at 


WashinEton.  DC 


Date  dictated 


N/A 


and  its  contents  are  not  to  be  distributed  outside  your  agency. 
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recollection,  CLINTON  sent  that  cable  out  in  2009.  After  CLINTON’S  time  as 
Secretary  of  State,  there  was  also  STATE  guidance  that  if  STATE  employees  had  to  use  their  personal 
email  for  business  purposes  they  should  send  a carbon  copy  (Cc)  to  their  “.gov”  work  email  as  well. 


b6 

b7C 


be 

b7C 


In  August  2014,  STATE  Under  Secretary  for  Management  Patrick  KENNEDY  sent  out  a 
memorandum  for  STATE  employees  not  to  use  personal  email  for  business  purposes,  but  it  did  not 
address  whether  personal  servers  may  be  used  for  business  purposes.  There  was  STATE  guidance  that  all 
information/emails  related  to  work  should  be  on  an  “approved  automated  system,”  but  there  was  no  i^g 

known  STATE  gnid^ce  regarding  the  use  of  personal  servers  to  conduct  business.  That  will  be  an  b7c 


official  “finding”  by 
STATE  IG. 


colleagud 


]stated|[ 


interviewed  PAGLIANO’s  former  boss  while  at  STATE,  and 


PAGLIANO’s  former  boss  was  unaware  PAGLIANO  set-up  CLINTON’S  personal  work  server  for  her. 
There  were  no  on-boarding  policies  in  place  to  prevent  what  happened  related  to  CLINTON  using  a 
personal  server.  STATE  IG  was  unsure  what,  if  any,  site  survey  or  systems  security  and  maintenance 
checks  were  conducted  prior  to  the  installation  of  CLINTON’S  server  by  PAGLIANO.  STATE  IG  was 
also  unsure  if  anyone  else  other  than  STATE  employees  knew  of,  ever  saw,  or  had  access  to  the  server. 


b6 

b7C 


All  of  STATE’S  top  officials’  email  records  related  to  their  “.gov”  emails  were  being  preserved,  or 
“journaled,”  no  matter  what.  Most  STATE  employees,  those  not  considered  top  officials,  could  create 
email  records  themselves  using  the  SMART  system.  The  onus  was  on  the  regular  STATE  employees  to 
self-deteimine  what  a record  is  and  if  they  didn’t  use  the  SMART  system  and  they’ve  double-deleted  the 
email,  it  was  more  than  likely  not  going  to  be  preserved. 


had  met 


Regarding  STATE  IG’s  review  and  interaction  with  KENNEDY,] 

KENNEDY  several  times,  and  stated  KENNEDY  was  never  overly  uncooperative  and  never  did  anything 
unusual  with  regards  to  his  cooperation.  However.  KENNEDY’S  tone  and  tenor  were  definitely  not 


positive  when  dealing  with  STATE  IG, 


Iso  attended  meetings  with  KENNEDY  in  the  past 


that  discussed  general  goals  going  forward  for  STATE  with  regards  to  STATE  IG’s  review. 


b6 

b7C 


[review  led  her  to  interview  STATE  officials  who  worked  the  FOIA  process  from 

within  the  Bureau  of  Administration,  Office  of  Information  Programs  and  Services,  which  fell  under 
KENNEDY’S  purview.  Some  FOIA  officials  have  seen  events  and  behaviors  they  did  not  like  or  that 
made  them  uncomfortable,  to  include  KENNEDY’S  attitude  toward  them  and  how  they  handled  the  FOIA 
process  related  to  CLINTON.  Additionally,  there  was  a request  from  the  FOIA  officials  to  STATE 
employees  that  asked  for  any  emails  sent  to  or  from  personal  email  accounts  related  to  the  CLINTON 
FOIA  request.  Some  STATE  employees  responded  they  had  no  emails  that  fit  the  request;  despite  the 
negative  response,  for  some  STATE  employees,  FOIA  officials  knew  there  were  at  least  some  emails  that 
should  have  been  included  in  their  response  because  the  FOIA  officials  had  already  reviewed  those  emails 
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from  within  the  batch  of  30,000  CLINTON-related  emails.  Despite  knowing  some  STATE  employees 
had  not  responded  correctly,  the  FOIA  officials  had  no  recourse  to  compel  a positive  response. 

For  the  FOIA  request  related  to  the  30,000  CLINTON-related  emails  and  the  Congressional 
inquiry  that  requested  Benghazi-related  emails,  those  review  process  were  handled  outside  the  normal 
chain  of  ppnr^lp  I Idid  not  know  whv  these  requests  were  handled  outside  the  normal  chain  of 

people,  but 


b6 

b7C 


b6 

b7C 


b5  per  DOS 


recommended  the  FBI  talk  to 


for  more  infoimation  on  events  discussed 
above  and  for  names  of  other  people  the  FBI  would  be  interested  in  talking  with  regarding  the  same. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


Date  of  transgription  Q5/2j&/2016 


(TJ//F0U0)  On  May  25,  2016J | Special  Agent,  United  States  Secret  Service 

fUSSSy  was  interviewed  bv  Federal  Bureau  of  Investigation  (FBI)  Special  Agents  (SAj  . . 

and  SA Also  present  for  the  interview  was  a Federal  Law  Enforcement 

Association  (FLEOA)  Attorney  and  USSS  SA|  I After  being  advised  of  the  identity  of  the 

interviewing  agents  and  the  nature  of  the  interview.  provided  the  following  information: 

(TJ/tfOyQ'l  Iwas  assigned  to  the  protective  detail  of  WILLIAM  CLINTON  from 

to Because  ofl  [information  technology  (IT)  stalls,  he  was  asked 

to  do  network  assessments  and  troubleshoot  IT  issues  at  the  Clinton  Foundation,  From to 

(assisted  the  Clinton  Foundation  in  a case  related  to  theft  of  information  on  the 

Clinton  Foundation  information  systems. 

(U//FQUO)|  vas  contacted  by  JUSTIN  COOPER  in  January  2011  to  assist  with  the 

security  of  an  email  server  at  the  Clinton  residence  in  Chappaqua,  New  York.l  did  not 

physically  or  remotely  access  the  server  in  the  residence  at  Chappaqw Jwas  not  aware  of  the 

hardware  components  of  the  server  or  software  installed  on  the  server.  conducted  open  source 

research  relating  to  the  security  of  email  servers  and  contacted  BRYAN  PAGLIANO  to  recommend 
adding  outbound  IP  filtering  to  the  server.  received  PAGLIANO’ s name  and  contact 

information  from  COOPER.  |was  aware  ot  no  other  information  pertaining  to  the  email  server 

located  in  Chappaqua. 

(U//FOUO)  Notes  of  the  interview  will  be  maintained  in  a FD340  envelope  and  filed  with  the 
captioned  investigation. 


Investigation  on  05/25/2016 


Boston.  Massachusetts 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  Jt  is  the  property  of  the  FBI  and  is  loaned  to  your  agency;  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency. 
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DATE  1Q"12™201£  BY  J37JS5T34  NSICG 

Date  of  transcription  09/17/2015 


On  September  17,  2015J 


JUCpiU  LllUJllL  Ul 

Special  Aeenj 


Also 


present  waa 


United  States 

BI 


Department  of  State  tPoSV  2025  E.  Street  NW,  Washington,  D.C.  20520,  was  interviewed  by  E 

land  Information  Technology  Specialist  / Foregsic  Examinerl 


DoS,  office  telephone 


After  being  advised  of  the  identity  of  the  interviewers  and  the  nature  of  the  interview 


provided  the  following  information: 


The  DoS  email  system  uses  a hub  and  spoke  configuration.  There  are  approximately  1 20,000 
mailboxes  on  the  system,  of  which  approximately  95,000  are  for  unique  users.  The  other  25,000 
mailboxes  are  general  mailboxes  and  aren’t  assigned  to  a specific  user.  Approximately  35,000  mailboxes 
reside  on  the  local  hub  and  are  administered  by  Information  Resource  Management  (IRM).  The 
remainder  of  the  mailboxes  reside  on  spokes  within  the  system  and  are  not  controlled  by  IRM.  Spoke 
mailboxes,  such  as  those  at  overseas  posts,  are  administered  by  the  local  Information  Security  Officer  and 
backup  procedures  vary  by  site. 


Upon  receiving  the  preservation  request  from  the  FBI,  IRM  preserved  and  thereafter  exported  the 
mailboxes  for  all  of  the  individuals  listed  on  the  request  whose  mailboxes  are  on  the  IRM  system. 

estimated  that  approximately  400  of  the  900  accounts  listed  on  the  preservation  request  are 
active  users  on  the  IRM  system,  with  the  other  accounts  residing  on  spokes,  POEMS,  or  are  associated 
with  users  who  are  no  longer  at  DoS.  Each  exported  mailbox  includes  all  of  the  active  mail  folders  as 
well  as  any  items  in  the  Recoverable  Items  storage  area  of  Microsoft  Exchange,  which  retains  items  for  90 
days  after  they  are  deleted  by  the  user.  The  export  does  not  include  any  files,  or  mailboxes,  that  may  have 
been  archived  by  the  user  to  their  local  desktop. 

The  IRM  operating  system  is  backed  up  and  retained  for  approximately  30  days.  However,  the 
email  database  is  not  part  of  the  backup.  For  email  recovery,  IRM  uses  Database  Availability  Groups 
(DAG)  whereby  five  dynamic  copies  of  each  mailbox  are  maintained,  at  two  sites,  to  allow  the  system  to 
be  quickly  restored  if  the  primary  database  fails. 


opined  that  the  exported  mailboxes  were  unlikely  to  contain  many  emails  from  prior  to 
2012.  Fnor  to  that  time  mailboxes  were  limited  to  500MB  of  data  and  users  were  regularly  required  to 
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delete  old  emails,  or  to  create  Personal  Storage  Folders  (.pst  files),  when  they  hit  the  storage  limit. 
Between  2012  and  2013,  the  storage  limits  were  increased  to  5GB. 

IRM  uses  the  State  Messaging  and  Archival  Retrieval  Tool  (SMART)  to  archive  record  emails. 
The  system  was  implemented  in  phases  between  2008  and  2010  and  replaced  CableXpress  for  archiving 

cables  and  record  email s.| noted  that  communications  sent  to  an  embassy  are  referred  to  as  a 

cable  and  emails  sent  to  a person  are  record  emails.  SMART  requires  the  users  to  identify  an  email  as 
meeting  the  record  standard  and  then  selecting  the  appropriate  SMART  tags  within  Outlook  while 
composing  the  email.  The  period  of  retention  for  a SMART  record  is  dependent  on  the  tags  selected  by 
the  user. 


use  the 
nolicv.l 


[provided  that  S/ES-IRM,  also  commonly  referred  to  as  the  POEMS  system,  does  not 
. system  to  archive  email  records.  They  are  instead  obligated  to  follow  the  'print  and  file' 
[further  noted  that  records  for  senior  officials  are  archived  when  they  leave  office. 


recommended  contacting  Deputy  Assistant  Secretary  MARGERET  (PEGGY)  GRAFELD, 
Deputy  Assistant  Secretary  for  Global  Information  Services  (A/GIS)  for  more  information  on  this 
process. 

The  Bureau  of  Intelligence  and  Research  (INR)  is  responsible  for  administering  iht  mailboxes  on 


the  top  secret  network  at  DoS. 
be  able  to  provide  further  details  on  INR  and  the  top  secret  mail  system. 


provided  that! 


telephone  202 


would 


hS 

hic 


hS 

hlC 


hS 
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A- 

FEDERAL  BUREAU  OF  INVESTIGATION 


Dale  of  transcription  09/22/20  i 5 


On  September  2 1 , 20 1 5^ 

Department  of  State  (STATE),  Office  of  Inspector  General  (OIG),  Offi 


United  States 


, Jgations.  1700 

N.  Moore  Street,  Suite  800.  ^yiington.  VA  22209,  office  telephone  70j| fax  703| 

email  addresq gjstate.gov  called  the  writy.  Information  Technology 

Speciaiist/Forensic  Examiner  (ITS/FE) of  the  Washington  Field  Office  (WFO) 

Computer  Analysis  Response  Team  (CART). 


|to  provide  general  information  regarding  group  of  fifty  (50) 
_ during  his  review  of  the  Microsoft 


The  writer  asked 

email  messages  of  interest  that  were  found  by{ 

Outlook  Personal  Storage  Folders  Epst  files,  or  “mailboxes”)  for  HUMA  M.  ABEDIN  and 
CHERYL  D.  MILLSP  confirmed  that  the  Federal  Bureau  of  Investigation  (FBI) 

previpuslv  received  a full  copy  of  the  two  (2)  mailboxes  on  a Lexar  thumb  drive  provided  by 
Jfrom  STATE. 


stated  that  he  performed  a search  across  the  email  data  for  the  words  “Secret” 
OFORN”  using  a search  program  called  “Perceptive  Search”  and  that  the  search  returned 

Jbelieved  that  most  of  the  search  hits  appeared  within  the 


and 

fifty  documents  of  interest.  ^ 

metadata  of  Microsoft  Word  documents,  which  he  identified  as  “Call  Sheets,”  or  documents 


iiicLdutiiii  mierosoii  woru  uocuments,  wnicn  ne  laentmea  as  Uall  Sheets,  or  dpcm 
provided  to  the  Secretary  of  State  prior  to  attending  briefings  with  foreign  dignitaries-L 


believed  the  search  hits  appeared  within  the  metadata  of  the  documents  and  not  within  the  actual 
content  of  the  documents.  The  identified  documents  were  sent  as  attachments  to  emails. 
could  not  remember  if  there  were  also  search  hits  within  any  email  messages. 


believed  that  the  documents  may  have  been  generated  from  a classified  system 


and  that  at  some  point  they  may  have  been  moved  to  an  unclassified  system.  However,  he  was 
unsure  whether  the  “Secret”  and  “NOFORN”  markings  would  have  been  generated  automatically 
by  the  system  that  was  used  to  create  the  documents.  |stated  that  STATE  had  not  yet 

determined  how  the  documents  would  have  been  marked  with  regard  to  classification. 


The  writer  requested  thal  [provide  the  FBI  with  the  file  names  and  Message- 

Digest  algorithm  5 (MD5)  hash  values  tor  the  files  identified  by  STATE.  [advised  that 


STATE  was  in  the  process  of  moving  the  email  data  onto  a stand-alone  computer  within  a 
Sensitive  Compartmented  Information  Facility  (SCIF)  and  that  he  anticipated  this  would  happen 
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toward  the  end  of  the  week  ton  or  around  Sentemher  7^  90 1 St  I 
coordinate  with 
nai 


On  09/21/2015  .Pape 


J 


|stated  that  he  would 
OIG,  STATE,  telephone  703- 


values  ot 


n 1 j u I'Jiu,  aiAit,  leiepnone  /uj 

J email  addres^ ^state.gov  to  obtain  and  provide  the  FBI  with  the  MD5  hash 

the  identified  files  and  that  he  would  contact  the  writer  when  this  process  was  complete. 
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FEDERAL  BUREAU  OF  INVESTIGATION 


DtUc  of  transcription  6/23/2CL6 


(U//FetfO)  On  June  23  2016 
tdenhonicallv  interviewed  by  Federal  Bureau  of 
Also  present  for  the  call  wasl 


],  date  of  birth[ 


nvestigation  tFBn  Special  Agent;  ^ ^ 
bounsel  [ Attorney 


was 


and 

at 


l.aw  After  being  advised  of  the  identities  of  the  interviewing  agents  and  the  purpose  of  the  interview, 
provided  the  following  information: 


. (U//FO 
was  shipped  Iw 
April  of  201 4[ 


1 


of 


had  no  new  infonnation  regarding  the  whereabouts  of  the  laptop  that 
from  Platte  River  Networks  (PRN)  to  the  Clinton  Foundation  in 


was  not  sure  who  the  mailroom  manager  for  the  Clinton  Foundation  was  at 

confirmed 

Floor,  New  York,  NY 


that  time  but  offered  to  contact  the  foundation  to  inquire  about  the  shipment.| 

that  the  address  of  the  Clinton  Foundation  was  1271  Avenue  of  the  Americas,  42' 

10020. 


b6 

b7C 


be 

b7C 


during  the  call  and  agreed  to  check  her  personal  records  for  any  relevant  information. 


(U//rOUO)  A copy  of  the  original  interview  notes  and  the  referenced  email  are  attached  in  a 1 A 
envelope. 


at 
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Date  of  transcription  10/27/2015 


On  October  27,  2015,  | a Special  Agent  with 

Homeland  Security  Investigations  (HSI) , Department  of  Homeland 
Security  (DHS) , Norfolk  Virginia,  (757)  was  interviewed  at 

the  Norfolk  Federal  Building.  After  being  advised  of  the  identity  of 
the  interviewing  Agent  and  the  nature  of  the  interview, 
provided  the  following  information: 


was  previously  employed  as  an  Agent  at  the  Department  of 
State,  Bureau  of  Diplomatic  Security  (DS)  , and  assigned  to  former 
Secretary  of  State  Rice's  personal  protection  detail  from  until 


January  2009.  In  January  2009  he  was  reassigned  to  former  Secretary  of 


State  Clinton's  detail. 


I [tfhen  he  left  the  Department  of  State. 


served  on  Clinton's  detail  until 


be 

b7C 


be 

b7C 


Clinton's  tenure  at  State  brought  about  significant  changes  to 
established  security  and  diplomatic  protocols  owing  to  the  dissimilar 
management  styles  and  attitudes  between  Rice  and  Clinton. 


claimed  that  his  time  on  Clinton's  detail  was  short  and  that  he  had  no 
information  to  offer  with  regard  to  security  violations  or  mishandling 
of  classified  information  on  the  part  of  Clinton  or  her  staff. 


advised  his  recollections  were  vague  regarding  his  time  on  Clinton' s 
detail ^ and  that  he  could  not  recall  specific  events  with  clarity. 

was  aware  that  a Blackberry  phone  was  kept  in  a desk  drawer  in 


Clinton' s SCIF  but  could  not  say  with  any  degree  of  certainty  that  the 
phone  belonged  to  Clinton  or  that  storing  it  in  the  SCTF  waK  r 


security  violation. 


provided  the  name . of 


a former  ASAC  on  Clinton' s security  detaji  as  F|nmenne  who  may  be  in  a 
position  to  provide  additional  insight, 
the  current  whereabouts  of 


was  not  familiar  with 
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Date  of  transcription  1 1/06/2015 


On  November  6,  20 1 5, 


(STATE),  office  telephone  70^ 

1a).state.gov  called  the  writer^ 


(ITS/FK) 


cell  202 


Senior  Special  Agent, 


Office  of  Investigations,  OfficeoftheJiiSPector  General  (Olfl).  United  States  Department  of  State 

( 


email  address 


(FBI)  Computer  Analysis  Response  Team  (CART) 


nformation  Technology  Specialist/Forensic  Examiner 
f the  Washington  Field  Office  (WFO)  Federal  Bureau  of  Investigation 


stated  that  he  located  an  email  containing  content  from  a “confidential  cable” 
sent  from  a Microsoft  “Hotmail”  email  account  to  the  STATE  email  address  for  Huma  Abedin 
(AbedinH@state.gov)  that  could  be  found  in  the  data  contained  within  evidence  item  1B26 
provided  by  STATE  to  the  FBI  on  or  around  August  14,  2015.  Evidence  item  IB26  is  further 
described  as  a white  and  grey  Lexar  USB  3.0  thumb  drive  labeled  with  a sticker  containing  the 
words  Dept  of  State  703-312-3856."  stated  that  when  the  email  was  received  in  201 1, 

the  information  was  classified  and  that  it  was  supposed  to  be  declassified  in  2013  but  that  he  did 
not  know  if  that  was  the  case  and  did  not  know  the  current  classification  of  the  document. 


On  November  6,  2015 


, [sent  the  writer  an  email  containing  information  to  assist 

in  locating  the  identified  email  in  the  FBI  data  set  in  evidence  item  1B26.  A copy  of  the  email  is 
included  in  a 1 A envelope. 
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Investigation  on  1 1/06/20]  j 


at 


Waghineton,  DC 


This  document  contains  neither  recommendations  nor  conclusions  of  the  FBI.  It  is  the  property  of  the  FBI  and  is  loaned  to  your  acency  it 
and  its  contents  are  not  to  be  distributed  outside  your  agency.  * ^ ^ 
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